0
Validation results

Satellite7

Satellite7

WordPress 4.8.2 theme
0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of base64_encode() Found base64_encode in file recaptchalib.php.
     return strtr(base64_encode ($x), '+/', '-_');
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" src="http://www.youtube.com/embed/<?php echo $portfolio_image['portfoliovideoid']; ?> in file single-portfolio_page.php.
    Line 190: <iframe width='100%' src='http://www.youtube.com/embed/<?php echo $portfoli
    Found <iframe height="<?php echo $video_height; ?>" src="http://www.youtube.com/embed/<?php echo get_post_meta(get_the_ID(), "video_format_link", true); ?> in file blog_small_image-loop.php.
    Line 35: <iframe height='<?php echo $video_height; ?>' src='http://www.youtube.com/e
    Found <iframe height="<?php echo $video_height; ?>" src="http://www.youtube.com/embed/<?php echo get_post_meta(get_the_ID(), "video_format_link", true); ?> in file blog_full_image_whole_post-loop.php.
    Line 35: <iframe height='<?php echo $video_height; ?>' src='http://www.youtube.com/e
    Found <iframe src="'. $server . '/noscript?k=' . $pubkey . $errorpart . '" height="300" width="500" frameborder="0"> in file recaptchalib.php.
    Line 126: <iframe src=''. $server . '/noscript?k=' . $pubkey . $errorpart . '' height
    Found <iframe title="YouTube video player" height="' . $height . '" src="http://www.youtube.com/embed/' . $id . '?wmode=transparent" wmode="Opaque" frameborder="0" allowfullscreen> in file shortcodes.php.
    Line 1335: $html .= '<iframe title='YouTube video player' height='' . $height . '' src='http://w
    Found <iframe height="<?php echo $video_height; ?>" src="http://www.youtube.com/embed/<?php echo get_post_meta(get_the_ID(), "video_format_link", true); ?> in file blog_single-loop.php.
    Line 39: <iframe height='<?php echo $video_height; ?>' src='http://www.youtube.com/e
    Found <iframe height="<?php echo $video_height; ?>" src="http://www.youtube.com/embed/<?php echo get_post_meta(get_the_ID(), "video_format_link", true); ?> in file blog_masonry-loop.php.
    Line 22: <iframe height='<?php echo $video_height; ?>' src='http://www.youtube.com/e
    Found <iframe height="<?php echo $video_height; ?>" src="http://www.youtube.com/embed/<?php echo get_post_meta(get_the_ID(), "video_format_link", true); ?> in file blog_full_image-loop.php.
    Line 35: <iframe height='<?php echo $video_height; ?>' src='http://www.youtube.com/e
  4. Malware : Operations on file system file_get_contents was found in the file single-portfolio_page.php
    Line 197: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 594: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    file_get_contents was found in the file single-portfolio_page.php
    Line 197: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 594: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    fwrite was found in the file recaptchalib.php
    Line 85: fwrite($fs, $http_request);
    fclose was found in the file recaptchalib.php
    Line 89: fclose($fs);
    file_get_contents was found in the file functions.php
    Line 668: $subject = file_get_contents(QODE_ROOT.'/css/font-awesome/css/font-awesome.css');
  5. Malware : Network operations fsockopen was found in the file recaptchalib.php
    Line 81: if( false == ( $fs = @fsockopen($host, $port, $errno, $errstr, 10) ) ) {
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File qode-options.php :
    Line 258: $this->pagehook = add_menu_page('Qode Theme', esc_html__('Qode', 'qode'), 'manage_options', '
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layersliderwp-5.6.10.installable.zip ._layersliderwp-5.6.10.installable.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag ajax in style.css header.Found wrong tag business in style.css header.Found wrong tag ios in style.css header.Found wrong tag apple in style.css header.Found wrong tag retina in style.css header.Found wrong tag responsive in style.css header.Found wrong tag wpml in style.css header.Found wrong tag corporate in style.css header.Found wrong tag clean in style.css header.Found wrong tag parallax in style.css header.Found wrong tag flat in style.css header.Found wrong tag multi-purpose in style.css header.Found wrong tag creative in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is satellite7.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Enter Name of the new Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Comments are off for this post.' in file qode-menu.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file shipping-calculator.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are qode, tgmpa, taxonomy general name, taxonomy singular name, text_domain, woocommerce.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  8. I18N implementation : Proper use of ___all(Possible variable $cvalue found in translation function in shipping-calculator.php. Translation function calls should not contain PHP variables.
    Line 57: echo '<option value='' . esc_attr( $ckey ) . '' ' . selected( $current_r, $ckey, false ) . '>' . __( esc_html( $cvalue ), 'woocommerce' ) .'</option>';
  9. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  10. Date and time implementation : Use of the_time()At least one hard coded date was found in the file blog_small_image-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_full_image_whole_post-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_single-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file format_blog-standard.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_masonry-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_full_image-loop.php. Function get_option( 'date_format' ) should be used instead.
  11. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  4. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  5. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : qode-menu.php
    Line 64: include_once('edit_custom_walker.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : qode-options.php
    Line 2: include_once('google-fonts.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax_mail.php
    Line 2: require_once('recaptchalib.php');
    Line 3: require('../../../../wp-blog-header.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 56: if(isset($qode_toolbar)) include('toolbar.php')
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_js.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default_dynamic.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page.php
    Line 123: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic_responsive.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_css.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic.php
    Line 1: <?php
    
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

33
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Malware : Network operations fsockopen was found in the file recaptchalib.php
    Line 81: if( false == ( $fs = @fsockopen($host, $port, $errno, $errstr, 10) ) ) {
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layersliderwp-5.6.10.installable.zip ._layersliderwp-5.6.10.installable.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag ajax in style.css header.Found wrong tag business in style.css header.Found wrong tag ios in style.css header.Found wrong tag apple in style.css header.Found wrong tag retina in style.css header.Found wrong tag responsive in style.css header.Found wrong tag wpml in style.css header.Found wrong tag corporate in style.css header.Found wrong tag clean in style.css header.Found wrong tag parallax in style.css header.Found wrong tag flat in style.css header.Found wrong tag multi-purpose in style.css header.Found wrong tag creative in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is satellite7.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Enter Name of the new Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Comments are off for this post.' in file qode-menu.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file shipping-calculator.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are qode, tgmpa, taxonomy general name, taxonomy singular name, text_domain, woocommerce.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  6. Date and time implementation : Use of the_time()At least one hard coded date was found in the file blog_small_image-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_full_image_whole_post-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_single-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file format_blog-standard.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_masonry-loop.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file blog_full_image-loop.php. Function get_option( 'date_format' ) should be used instead.
  7. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  4. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  5. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : qode-menu.php
    Line 64: include_once('edit_custom_walker.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : qode-options.php
    Line 2: include_once('google-fonts.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax_mail.php
    Line 2: require_once('recaptchalib.php');
    Line 3: require('../../../../wp-blog-header.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 56: if(isset($qode_toolbar)) include('toolbar.php')
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_js.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default_dynamic.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page.php
    Line 123: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic_responsive.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_css.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic.php
    Line 1: <?php
    
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes