0
Validation results

Sakhr

Sakhr

WordPress 4.8.2 theme
0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of base64_decode() Found base64_decode in file OAuth.php.
    Line 202: $decoded_sig = base64_decode($signature);
    Found base64_decode in file mpanel-functions.php.
    Line 151: $data = unserialize(base64_decode( $data['mu_import'] ));
  3. Security breaches : Use of base64_encode() Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
    Found base64_encode in file mpanel-ui.php.
     <textarea style='width:100%' rows='7'><?php echo $currentsettings = base64_encode( serialize( $current_options )); ?></textarea>
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="'.$width.'" height="'.$height.'" src="http://www.youtube.com/embed/'.$video.'?rel=0" frameborder="0" allowfullscreen> in file post-head.php.
    Line 27: $video_code ='<iframe width=''.$width.'' height=''.$height.'' src='http://www.youtube.com
    Found <iframe width="100%" height="210" src="http://www.youtube.com/embed/<?php echo $youtube_video ?> in file widget-video.php.
    Line 42: <iframe width='100%' height='210' src='http://www.youtube.com/embed/<?php e
    Found <iframe id="fr" src="http://www.youtube.com/subscribe_widget?p=<?php echo $page_url ?> in file widget-youtube.php.
    Line 27: <iframe id='fr' src='http://www.youtube.com/subscribe_widget?p=<?php echo $
    Found <iframe width="100%" height="166" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url='.$url.'&amp;auto_play='.$play.'&amp;show_artwork=true"> in file widget-soundcloud.php.
    Line 30: echo '<iframe width='100%' height='166' scrolling='no' frameborder='no' src='http
    Found <iframe src="http://www.facebook.com/plugins/likebox.php?href=<?php echo $page_url ?> in file widget-facebook.php.
    Line 27: <iframe src='http://www.facebook.com/plugins/likebox.php?href=<?php echo $p
    Found <iframe src="http://www.facebook.com/plugins/like.php?href='. get_permalink($post-> in file shortcode.php.
    Line 414: return '<iframe src='http://www.facebook.com/plugins/like.php?href='. get_permalink
    Found <iframe width="'.$width.'" height="'.$height.'" frameborder="0" scrolling="no" marginheight="0" marginwidth="0" src="'.$src.'&amp;output=embed"> in file theme-functions.php.
    Line 140: return '<div class='google-map'><iframe width=''.$width.'' height=''.$height.'' frameborder='0' scrolling='
  5. Malware : Operations on file system file_get_contents was found in the file OAuth.php
    Line 272: file_get_contents(self::$POST_INPUT)
    file_get_contents was found in the file parsers.php
    Line 252: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fopen was found in the file parsers.php
    Line 398: $fp = $this->fopen( $file, 'r' );
    Line 615: function fopen( $filename, $mode = 'r' ) {
    Line 618: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    fclose was found in the file parsers.php
    Line 447: $this->fclose($fp);
    Line 633: function fclose( $fp ) {
    Line 636: return fclose( $fp );
    file_get_contents was found in the file update-notifier.php
    Line 119: $cache = @file_get_contents($notifier_file_url); // ...if not, use the common file_ge
    file_get_contents was found in the file update-notifier.php
    Line 119: $cache = @file_get_contents($notifier_file_url); // ...if not, use the common file_ge
  6. Malware : Network operations curl_init was found in the file widget-counter.php
    Line 187: $ch = curl_init();
    curl_exec was found in the file widget-counter.php
    Line 191: $data = curl_exec($ch);
    curl_init was found in the file twitteroauth.php
    Line 195: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 221: $response = curl_exec($ci);
    curl_init was found in the file update-notifier.php
    Line 111: if( function_exists('curl_init') ) { // if cURL is available, use it...
    Line 112: $ch = @curl_init($notifier_file_url);
    curl_exec was found in the file update-notifier.php
    Line 116: $cache = @curl_exec($ch);
  7. Admin menu : Themes should use add_theme_page() for adding admin pages. File mpanel-functions.php :
    Line 197: add_menu_page(THEMENAME.' Settings', THEMENAME ,'install_themes', 'panel' ,
    File mpanel-functions.php :
    Line 198: $theme_page = add_submenu_page('panel',THEMENAME.' Settings', THEMENAME.' Settings','inst
    File update-notifier.php :
    Line 32: add_submenu_page('panel', MTHEME_NOTIFIER_THEME_NAME . ' Theme Updates', MT
  8. Content width : Proper definition of content_width No content width has been defined. Example:
    if ( ! isset( $content_width ) ) $content_width = 900;
  9. Deprecated functions : screen_icon screen_icon found in file importer.php. Deprecated since version 3.8.
    Line 993: screen_icon();
  10. Deprecated functions : wp_get_http wp_get_http found in file importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Line 866: $headers = wp_get_http( $url, $upload['file'] );
  11. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file template-restrict.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Line 41: global $user_ID; get_currentuserinfo();
    get_currentuserinfo found in file template-signup.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Line 112: <?php global $userdata; get_currentuserinfo(); echo get_avatar($userdata->ID, 60); ?>
Warning
  1. special URIs : Presence of bad theme tagsTheme URI and Author URI should not be the same.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is sakhr.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments '%s ago' in file widget-twitter.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Y/m/d' in file widget-twitter.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Y/m/d H:i:s' in file widget-twitter.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mu, twitter-for-wordpress, color-theme-framework, ajax-thumbnail-rebuild, wordpress-importer.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. Deprecated functions : screen_iconscreen_icon found in file importer.php. Deprecated since version 3.8.
    Line 993: screen_icon();
  8. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  9. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
  10. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  11. CSS files : Presence of .sticky class.sticky css class is needed in theme css.
  12. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  13. Date and time implementation : Use of the_time()At least one hard coded date was found in the file widget-author.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file template-timeline.php. Function get_option( 'date_format' ) should be used instead.
  14. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file post-head.php.
    Line 260: To play the media you will need to either update your browser to a recent version or update your <a href='http://get.adobe.com/flashplayer/' target='_blank'>Flash plugin</a>.
    Possible hard-coded links were found in the file widget-flickr.php.
    Line 79: <small> Find Your ID at(<a href='http://www.idgettr.com'>idGettr</a>)</small>
    Possible hard-coded links were found in the file widget-instagram.php.
    Line 109: <label for='<?php echo $this->get_field_id( 'client_id' ); ?>'>Your Instagram application <a href='http://instagram.com/developer/clients/register/'>clientID</a> : </label>
    Line 113: <label for='<?php echo $this->get_field_id( 'access_token' ); ?>'> Your Instagram <a href='http://stylehatch.co/instagram/'>access token </a></label>
    Possible hard-coded links were found in the file ajax-thumbnail-rebuild.php.
    Line 3: Plugin URI: http://breiti.cc/wordpress/ajax-thumbnail-rebuild
    Line 155: '<a href='http://breiti.cc/wordpress/ajax-thumbnail-rebuild' target='_blank'>', '</a>
    Possible hard-coded links were found in the file mpanel-ui.php.
    Line 584: <p style='padding:10px;'>This information will uses in social counter and Twitter Widget .. You need to create <a href='https://dev.twitter.com/apps' target='_blank'>Twitter APP</a> .</p>
    Possible hard-coded links were found in the file ui.php.
    Line 336: <small>(get it from <a href='http://www.idgettr.com'>idGettr</a>)</small>
    Possible hard-coded links were found in the file shortcode.php.
    Line 422: return '<a href='http://twitter.com/share' class='twitter-share-button' data-url=''. get_per
    Possible hard-coded links were found in the file update-notifier.php.
    Line 82: <p><h3>DOWNLOAD</h3> Get the latest update of the Theme, login to <a href='http://www.mojo-themes.com/'>mojo themes</a>, head over to your <strong>Dow
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : widgets.php
    Line 2: include (TEMPLATEPATH . '/includes/widgets/widget-tabbed.php');
    Line 3: include (TEMPLATEPATH . '/includes/widgets/widget-posts.php');
    Line 4: include (TEMPLATEPATH . '/includes/widgets/widget-login.php'); 
    Line 5: include (TEMPLATEPATH . '/includes/widgets/widget-facebook.php');
    Line 6: include (TEMPLATEPATH . '/includes/widgets/widget-google.php');
    Line 7: include (TEMPLATEPATH . '/includes/widgets/widget-category.php');
    Line 8: include (TEMPLATEPATH . '/includes/widgets/widget-comments-avatar.php');
    Line 9: include (TEMPLATEPATH . '/includes/widgets/widget-text-html.php');
    Line 10: include (TEMPLATEPATH . '/includes/widgets/widget-news-pic.php');
    Line 11: include (TEMPLATEPATH . '/includes/widgets/widget-flickr.php'); 
    Line 12: include (TEMPLATEPATH . '/includes/widgets/widget-author.php');
    Line 13: include (TEMPLATEPATH . '/includes/widgets/widget-video.php');
    Line 14: include (TEMPLATEPATH . '/includes/widgets/widget-twitter.php');
    Line 15: include (TEMPLATEPATH . '/includes/widgets/widget-counter.php');
    Line 16: include (TEMPLATEPATH . '/includes/widgets/widget-search.php');
    Line 17: include (TEMPLATEPATH . '/includes/widgets/widget-custom-author.php');
    Line 18: include (TEMPLATEPATH . '/includes/widgets/widget-feedburner.php');
    Line 19: include (TEMPLATEPATH . '/includes/widgets/widget-social.php');
    Line 20: include (TEMPLATEPATH . '/includes/widgets/widget-ads.php');
    Line 21: include (TEMPLATEPATH . '/includes/widgets/widget-reviews.php');
    Line 22: include (TEMPLATEPATH . '/includes/widgets/widget-slider.php');
    Line 23: include (TEMPLATEPATH . '/includes/widgets/widget-instagram.php');
    Line 24: include (TEMPLATEPATH . '/includes/widgets/widget-youtube.php');
    Line 25: include (TEMPLATEPATH . '/includes/widgets/widget-soundcloud.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : twitteroauth.php
    Line 10: require_once('OAuth.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : mpanel-functions.php
    Line 11: //include_once(ABSPATH . WPINC . '/feed.php');
    Line 77: require ('google-fonts.php');
    Line 174: require_once(get_template_directory(). '/panel/xml-importer/importer.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-signup.php
    Line 49: // require_once( ABSPATH . WPINC . '/registration.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-functions.php
    Line 251: include ( get_template_directory() . '/includes/'.$template.'.php' );
    Line 993: include_once(ABSPATH . WPINC . '/feed.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes