0
Validation results

Woodmart

Woodmart

WordPress 4.9.7 theme
0
Critical alerts
  1. Security breaches : Use of base64_encode() Found base64_encode in file functions.php.
     $imageData = base64_encode( file_get_contents( $image_path ) );
  2. Malware : Operations on file system file_get_contents was found in the file functions.php
    Line 2236: $imageData = base64_encode( file_get_contents( $image_path ) );
  3. Admin menu : Themes should use add_theme_page() for adding admin pages. File dashboard.php :
    Line 53: add_submenu_page(
    Line 61: add_submenu_page(
    Line 71: add_submenu_page(
    Line 80: add_submenu_page(
    Line 89: add_submenu_page(
    File dashboard.php :
    Line 53: add_submenu_page(
    Line 61: add_submenu_page(
    Line 71: add_submenu_page(
    Line 80: add_submenu_page(
    Line 89: add_submenu_page(
    File dashboard.php :
    Line 53: add_submenu_page(
    Line 61: add_submenu_page(
    Line 71: add_submenu_page(
    Line 80: add_submenu_page(
    Line 89: add_submenu_page(
    File dashboard.php :
    Line 53: add_submenu_page(
    Line 61: add_submenu_page(
    Line 71: add_submenu_page(
    Line 80: add_submenu_page(
    Line 89: add_submenu_page(
    File dashboard.php :
    Line 53: add_submenu_page(
    Line 61: add_submenu_page(
    Line 71: add_submenu_page(
    Line 80: add_submenu_page(
    Line 89: add_submenu_page(
  4. Inapropriate constants : Use of STYLESHEETPATH Constant STYLESHEETPATH was found in the file Element.php. get_stylesheet_directory() should be used instead.
    Line 54: $located = STYLESHEETPATH . $path;
  5. Inapropriate constants : Use of TEMPLATEPATH Constant TEMPLATEPATH was found in the file Element.php. get_template_directory() should be used instead.
    Line 56: $located = TEMPLATEPATH . $path;
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip revslider2.zip js_composer.zip woodmart-core.zip.
Warning
  1. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are woodmart, woocommerce, yith-woocommerce-compare, yith-woocommerce-wishlist, js_composer.
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  3. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  4. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  5. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in template-tags.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file License.php.
    Line 61: <label for='purchase-code'><?php _e('Purchase code', 'woodmart'); ?> (<a href='https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-Purc
    Line 101: $this->_notices->add_error( 'The purchase code is invalid. <a target='_blank' href='https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-Purc
    Possible hard-coded links were found in the file Row.php.
    Line 51: 'description' => wp_kses( __( 'Determine the 'flex layout' for this row. More information about both options read in our <a href='https://xtemos.com/docs/woodmart/header-builder/header-rows-flex-layouts/' 
    Possible hard-coded links were found in the file settings.php.
    Line 114: 'subtitle' => wp_kses( __('Obtain API key <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
    Line 1097: 'default' => '<small><a href='http://woodmart.xtemos.com'><strong>WOODMART</strong></a> <i class='fa fa-c
    Line 3352: To do that you need to create an APP on the Facebook <a href='https://developers.facebook.com/' target='_blank'>https://developers.facebo
    Line 3353: Then go to APP settings and copy App ID and App Secret there. You also need to insert Redirect URI like this example 'http://YOURSITE.COM/my-account/facebook/int_callback'. More information you can get in our <a href='https://xtemos.com/docs/woodmart/faq-guides/configure-facebook-login/' targ
    Line 3372: To do that you need to Create a Google APIs project at <a href='https://code.google.com/apis/console/' target='_blank'>https://console.deve
    Line 3374: More information you can get in our <a href='https://xtemos.com/docs/woodmart/faq-guides/configure-google-login/' target
    Line 3392: 'desc' => 'To enable login/register with vk.com you need to create an APP here <a href='https://vk.com/dev' target='_blank'>https://vk.com/dev</a>.
    Possible hard-coded links were found in the file header.php.
    Line 21: <a href='https://xtemos.com/documentation/woodmart/' target='_blank' class='btn-docs
    Line 22: <a href='https://www.youtube.com/playlist?list=PLMw6W4rAaOgKKv0oexGHzpWBg1imvrval' t
    Line 23: <a href='https://themeforest.net/downloads' class='btn-rate button' target='_blank'>
    Line 24: <a href='https://xtemos.com/forums/forum/woodmart-premium-template/' class='btn-supp
    Possible hard-coded links were found in the file license.php.
    Line 22: If you need to check all your active domains or you want to remove some of them you should visit <a href='https://xtemos.com/' target='_blank'>our website</a> and check the activati
    Possible hard-coded links were found in the file google-map.php.
    Line 24: 'description' => wp_kses( __( 'You can use <a href='http://universimmedia.pagesperso-orange.fr/geo/loc.htm' target='_blank'>thi
    Line 40: 'description' => wp_kses( __( 'Obtain API key <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : Importversion.php
    Line 538: require_once($class_wp_importer);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : woocommerce.php
    Line 2098: include_once( WC()->plugin_path() . '/includes/walkers/class-product-cat-li
    Line 2287: include_once( WC()->plugin_path() . '/includes/walkers/class-product-cat-li
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

36
Critical alerts
  1. Inapropriate constants : Use of STYLESHEETPATH Constant STYLESHEETPATH was found in the file Element.php. get_stylesheet_directory() should be used instead.
    Line 54: $located = STYLESHEETPATH . $path;
  2. Inapropriate constants : Use of TEMPLATEPATH Constant TEMPLATEPATH was found in the file Element.php. get_template_directory() should be used instead.
    Line 56: $located = TEMPLATEPATH . $path;
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip revslider2.zip js_composer.zip woodmart-core.zip.
Warning
  1. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are woodmart, woocommerce, yith-woocommerce-compare, yith-woocommerce-wishlist, js_composer.
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  3. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  4. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in template-tags.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file License.php.
    Line 61: <label for='purchase-code'><?php _e('Purchase code', 'woodmart'); ?> (<a href='https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-Purc
    Line 101: $this->_notices->add_error( 'The purchase code is invalid. <a target='_blank' href='https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-Purc
    Possible hard-coded links were found in the file Row.php.
    Line 51: 'description' => wp_kses( __( 'Determine the 'flex layout' for this row. More information about both options read in our <a href='https://xtemos.com/docs/woodmart/header-builder/header-rows-flex-layouts/' 
    Possible hard-coded links were found in the file settings.php.
    Line 114: 'subtitle' => wp_kses( __('Obtain API key <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
    Line 1097: 'default' => '<small><a href='http://woodmart.xtemos.com'><strong>WOODMART</strong></a> <i class='fa fa-c
    Line 3352: To do that you need to create an APP on the Facebook <a href='https://developers.facebook.com/' target='_blank'>https://developers.facebo
    Line 3353: Then go to APP settings and copy App ID and App Secret there. You also need to insert Redirect URI like this example 'http://YOURSITE.COM/my-account/facebook/int_callback'. More information you can get in our <a href='https://xtemos.com/docs/woodmart/faq-guides/configure-facebook-login/' targ
    Line 3372: To do that you need to Create a Google APIs project at <a href='https://code.google.com/apis/console/' target='_blank'>https://console.deve
    Line 3374: More information you can get in our <a href='https://xtemos.com/docs/woodmart/faq-guides/configure-google-login/' target
    Line 3392: 'desc' => 'To enable login/register with vk.com you need to create an APP here <a href='https://vk.com/dev' target='_blank'>https://vk.com/dev</a>.
    Possible hard-coded links were found in the file header.php.
    Line 21: <a href='https://xtemos.com/documentation/woodmart/' target='_blank' class='btn-docs
    Line 22: <a href='https://www.youtube.com/playlist?list=PLMw6W4rAaOgKKv0oexGHzpWBg1imvrval' t
    Line 23: <a href='https://themeforest.net/downloads' class='btn-rate button' target='_blank'>
    Line 24: <a href='https://xtemos.com/forums/forum/woodmart-premium-template/' class='btn-supp
    Possible hard-coded links were found in the file license.php.
    Line 22: If you need to check all your active domains or you want to remove some of them you should visit <a href='https://xtemos.com/' target='_blank'>our website</a> and check the activati
    Possible hard-coded links were found in the file google-map.php.
    Line 24: 'description' => wp_kses( __( 'You can use <a href='http://universimmedia.pagesperso-orange.fr/geo/loc.htm' target='_blank'>thi
    Line 40: 'description' => wp_kses( __( 'Obtain API key <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : Importversion.php
    Line 538: require_once($class_wp_importer);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : woocommerce.php
    Line 2098: include_once( WC()->plugin_path() . '/includes/walkers/class-product-cat-li
    Line 2287: include_once( WC()->plugin_path() . '/includes/walkers/class-product-cat-li
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes