0
Validation results

Themify Basic

Free WordPress 4.9 theme

Themify Basic

Free WordPress 4.9 theme
0
Error 8 : Undefined variable: cms
In /home/www/themecheck/themecheck/controllers/controller_results.php line 818
Critical alerts
  1. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of base64_decode() Found base64_decode in file themify-updater.php.
    Ligne585: $status = base64_decode( $_COOKIE['themify_user_m'] ); // 'member_themify_check' == s
    Ligne609: $username = base64_decode( $_COOKIE['themify_user_u'] );
    Ligne622: $password = base64_decode( $_COOKIE['themify_user_p'] );
  3. Security breaches : Use of base64_encode() Found base64_encode in file themify-updater.php.
     setrawcookie( 'themify_user_m', base64_encode( 'member_themify_check' ), strtotime( '+15 days' ), '/' );
     setrawcookie( 'themify_user_u', base64_encode( $username ), strtotime( '+15 days' ), '/' );
     setrawcookie( 'themify_user_p', base64_encode( $password ), strtotime( '+15 days' ), '/' );
    Found base64_encode in file css.php.
     $importContent = base64_encode($importContent);
  4. Malware : Operations on file system fopen was found in the file class-themify-builder-import-export.php
    Ligne204: $out_fp = fopen($upload['file'], 'w');
    fwrite was found in the file class-themify-builder-import-export.php
    Ligne209: fwrite($out_fp,  wp_remote_retrieve_body( $response ) );
    fclose was found in the file class-themify-builder-import-export.php
    Ligne210: fclose($out_fp);
    file_get_contents was found in the file minify.php
    Ligne84: $data = file_get_contents($data);
    fopen was found in the file minify.php
    Ligne106: if (($handler = @fopen($path, 'w')) === false) {
    fwrite was found in the file minify.php
    Ligne111: if (@fwrite($handler, $content) === false) {
    fclose was found in the file minify.php
    Ligne116: @fclose($handler);
    readfile was found in the file class-themify-cache.php
    Ligne71: readfile(self::$cache['cache_dir']);
  5. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : class-hook-contents.php.
  6. Deprecated functions : like_escape like_escape found in file module-feature.php. Deprecated since version 4.0. Use wpdb::esc_like() instead.
    Ligne744: $url = method_exists( $wpdb, 'esc_like' ) ? $wpdb->esc_like( $parsed_url[1] ) : like_escape( $parsed_url[1] );
  7. Deprecated functions : wp_get_http wp_get_http found in file class-themify-builder-layouts-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne790: $headers = wp_get_http( $url, $upload['file'] );
    wp_get_http found in file demo-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne907: $headers = wp_get_http( $url, $upload['file'] );
  8. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file class-builder-duplicate-page.php. Deprecated since version 4.5. Use wp_get_current_user instead.
    Ligne202: } else if ( function_exists( 'get_currentuserinfo' ) ) {
    Ligne204: get_currentuserinfo();
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was product-4.zip fullscreen.zip product-7.zip event-2.zip app-5.zip app-6.zip ebook-2.zip fullscreen-2.zip portfolio.zip event.zip company.zip coming-soon.zip product-2.zip app.zip product-6.zip shop.zip ebook.zip corporate-2.zip app-2.zip marketer-2.zip product-8.zip marketer.zip agency-2.zip music-2.zip wedding.zip restaurant.zip corporate.zip music.zip restaurant-2.zip portfolio-4.zip blog.zip app-7.zip product-5.zip resume.zip portfolio-2.zip app-8.zip product-3.zip music-3.zip shop-2.zip company-3.zip app-3.zip app-4.zip portfolio-3.zip product.zip personal.zip masonry-image.zip post-slider.zip agency.zip company-2.zip sample-content.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in themify-utils.php. Themes must not deregister core scripts.
    Ligne1083: wp_deregister_script( 'mediaelement' );
    Ligne1086: wp_deregister_script( 'wp-mediaelement' );
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is themify-basic.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file class-themify-control.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file class-themify-control.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file class-themify-control.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Import Module' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Export Module' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Import Row' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Export Row' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Import Sub-Row' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Export Sub-Row' in file class-themify-builder.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'd/m/Y @ h:i:s a' in file class-themify-builder-revisions.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'label' in file template-buttons.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'label' in file template-icon.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file template-map.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file template-gallery-showcase.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file class-tgm-plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file class-tgm-plugin-activation.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are themify, wordpress-importer, tgmpa.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. I18N implementation : Proper use of _e(Possible variable $googlefonts found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $content found in translation function in template-buttons.php. Translation function calls should not contain PHP variables. Possible variable $content found in translation function in template-icon.php. Translation function calls should not contain PHP variables. Possible variable $data found in translation function in template-map.php. Translation function calls should not contain PHP variables. Possible variable $alt found in translation function in template-gallery-showcase.php. Translation function calls should not contain PHP variables.
  8. I18N implementation : Proper use of ___all(Possible variable $this found in translation function in class-themify-builder-module.php. Translation function calls should not contain PHP variables.
  9. I18N implementation : Proper use of esc_attr_e(Possible variable $googlefonts found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in class-themify-control.php. Translation function calls should not contain PHP variables. Possible variable $content found in translation function in template-buttons.php. Translation function calls should not contain PHP variables. Possible variable $content found in translation function in template-icon.php. Translation function calls should not contain PHP variables. Possible variable $data found in translation function in template-map.php. Translation function calls should not contain PHP variables. Possible variable $alt found in translation function in template-gallery-showcase.php. Translation function calls should not contain PHP variables.
  10. I18N implementation : Proper use of esc_html___all(Possible variable $this found in translation function in class-themify-builder-module.php. Translation function calls should not contain PHP variables.
  11. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file theme-modules.php.
    Ligne125: $output = '<div class='themify-info-link'>' . __( 'Here you can set the <a href='http://themify.me/docs/default-layouts'>Default Layouts</a> for WordPress a
    Possible hard-coded links were found in the file module-video.php.
    Ligne43: 'help' => __('YouTube, Vimeo, etc. video <a href='http://themify.me/docs/video-embeds' target='_blank'>embed link</a>', 'them
    Possible hard-coded links were found in the file themify-updater.php.
    Ligne154: $fw_notifications = '<p class='update'>' . sprintf( __( 'Framework version %s is now available. <a href='%s' title='' class='%s' target='%s'>Update Now</a> or view the <a href='%s' data-changelog='http://themify.me/changelogs/themify.txt' class='themify_changelogs' target
    Ligne159: isset($_GET['action']) && $_GET['action']=='upgrade'?'http://themify.me/changelogs/themify.txt':'http://themify.me/logs/framework
    Ligne270: $fw_notifications = sprintf( __( '<p class='update %s'>Framework version %s is now available. <a href='%s' class='%s' target='%s'>Update Now</a> or view the <a href='http://themify.me/changelogs/themify.txt' target='_blank' data-changelog='h
    Possible hard-coded links were found in the file themify-utils.php.
    Ligne429: <p id='logo'><a href='http://themify.me/logs/framework-changelogs/' data-changelog='http://themif
    Ligne1021: 'invalid_login' => __('Invalid username or password.<br/>Contact <a href='http://themify.me/contact'>Themify</a> for login issues.', 'themify'),
    Ligne1022: 'unsuscribed' => __('Your membership might be expired. Login to <a href='http://themify.me/member'>Themify</a> to check.', 'themify'),
    Ligne4579: 'description' => __('Link Featured Image and Post Title to lightbox image, video or iframe URL <br/>(<a href='http://themify.me/docs/lightbox'>learn more</a>)', 'themify'),
    Possible hard-coded links were found in the file dialog.php.
    Ligne408: 'help' => sprintf( __('Example: 52839779@N02. Use %s to find your user ID', 'themify'), '<a href='http://idgettr.com/' target='_blank'>idGettr.com</a>' )
    Possible hard-coded links were found in the file theme-functions.php.
    Ligne142: 'description' => __('Image sizes can be set at <a href='options-media.php'>Media Settings</a> and <a href='https://wordpress.org/pl
    Ligne415: 'description' => __('Image sizes can be set at <a href='options-media.php'>Media Settings</a> and <a href='https://wordpress.org/pl
    Ligne237: 'description' => __('Video embed URL such as YouTube or Vimeo video url (<a href='http://themify.me/docs/video-embeds'>details</a>).', 'themify'),
    Ligne142: 'description' => __('Image sizes can be set at <a href='options-media.php'>Media Settings</a> and <a href='https://wordpress.org/pl
    Ligne415: 'description' => __('Image sizes can be set at <a href='options-media.php'>Media Settings</a> and <a href='https://wordpress.org/pl
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : class-themify-builder-layouts.php
    Ligne216: $data = include( THEMIFY_BUILDER_INCLUDES_DIR . '/data/layouts.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-themify-builder-import-export.php
    Ligne68: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    Ligne182: require_once( ABSPATH . 'wp-admin/includes/image.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-themify-builder.php
    Ligne749: require_once( $path );
    Ligne1273: require_once( THEMIFY_BUILDER_INCLUDES_DIR . '/themify-builder-options-form
    Ligne1288: require_once( THEMIFY_BUILDER_INCLUDES_DIR . '/themify-builder-options-form
    Ligne1299: require_once( THEMIFY_BUILDER_INCLUDES_DIR . '/themify-builder-options-form
    Ligne1692: include_once( sprintf('%s/themify-builder-js-tmpl-front.php', THEMIFY_BUILD
    Ligne1699: include_once( sprintf('%s/themify-builder-js-tmpl-admin.php', THEMIFY_BUILD
    Ligne1706: include_once( sprintf('%s/themify-builder-js-tmpl-common.php', THEMIFY_BUIL
    Ligne1845: require_once( ABSPATH . 'wp-admin' . '/includes/image.php' );
    Ligne2155: include( $located );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : module-portfolio.php
    Ligne24: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-builder.php
    Ligne39: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-model.p
    Ligne40: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-form.ph
    Ligne41: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-layouts
    Ligne42: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-module.
    Ligne43: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder.php' );
    Ligne44: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-import-
    Ligne45: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-plugin-
    Ligne46: require_once( THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-visibil
    Ligne47: require_once( THEMIFY_BUILDER_INCLUDES_DIR . '/themify-builder-options.php'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-builder-updater.php
    Ligne320: require_once(THEMIFY_BUILDER_CLASSES_DIR . '/class-themify-builder-upgrader
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm-plugin-activation.php
    Ligne1061: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-utils.php
    Ligne5386: require_once 'class-themify-mobile-detect.php';
    Ligne5668: require_once( THEME_DIR . '/sample/demo-settings.php' );
    Ligne5850: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-shortcodes.php
    Ligne938: require 'twitteroauth/class-wp-twitter-api.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : dialog.php
    Ligne496: 'label' => __('Categories to include', 'themify'),
    Ligne668: 'label' => __('Categories to include', 'themify'),
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-wpajax.php
    Ligne116: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-microdata.php
    Ligne33: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : themify-config.php
    Ligne85: require_once( THEME_DIR . '/themify/class-themify-filesystem.php' );
    Ligne90: require_once(THEME_DIR . '/themify/class-themify-cache.php');
    Ligne96: require_once(THEME_DIR . '/themify/themify-shortcodes.php');
    Ligne102: require_once( THEMIFY_DIR . '/themify-builder/themify-builder.php' );
    Ligne283: require_once(THEMIFY_DIR . '/themify-hooks.php' );
    Ligne284: require_once(THEMIFY_DIR . '/class-hook-contents.php' );
    Ligne290: require_once(THEMIFY_DIR . '/class-themify-access-role.php' );
    Ligne329: require_once(THEMIFY_DIR . '/themify-wpajax.php');
    Ligne375: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes