0
Validation results

Aqua

Aqua

WordPress 6.5.2 theme
0
  • THEME TYPEWordPress theme 6.5.2
  • FILE NAMEaqua.zip
  • FILE SIZE8637789 bytes
  • MD598369f200cf703ef25ead937b5d4a63a
  • SHA119e8fd4cb549d17d208a8a7e021b60f709680ee5
  • LICENSEGNU GPL 3
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEME URIhttp://aqua.jwsuperthemes.com
  • VERSION3.1.6
  • TAGSblack, green, white, light, dark, two-columns, three-columns, left-sidebar, right-sidebar, fixed-layout, responsive-layout, custom-background, custom-header, custom-menu, editor-style, featured-images, flexible-header, full-width-template, microformats, po
  • CREATION DATE2019-10-25
  • LAST FILE UPDATE2019-10-25
  • LAST VALIDATION2019-10-25 16:51
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Security breaches : Use of base64_encode() Found base64_encode in file HmacSha1.php.
     return base64_encode(hash_hmac('sha1', $signatureBase, $key, true));
    Found base64_encode in file TwitterOAuth.php.
     $base = base64_encode($file);
     'media_data' => base64_encode(fread($media, self::UPLOAD_CHUNK))
     return base64_encode($key . ':' . $secret);
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="'.esc_url($src).'" width="'.esc_attr($width).'" height="'.esc_attr($height).'" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen> in file video.php. 29: <iframe src=''.esc_url($src).'' width=''.esc_attr($width).'' height=''.esc_
  4. Malware : Operations on file system fopen was found in the file class.redux_helpers.php 659: //$fp = fopen( $file, 'r' );fread was found in the file class.redux_helpers.php 662: //$file_data = fread( $fp, 8192 );fclose was found in the file class.redux_helpers.php 665: //fclose( $fp );file_get_contents was found in the file lessc.inc.php 121: $root = $parser->parse(file_get_contents($realPath));1830: $out = $this->compile(file_get_contents($fname), $fname);fwrite was found in the file lessc.inc.php 687: // fwrite(STDERR,'failed to find block: '.implode(' > ', $path).'\n');file_get_contents was found in the file lessc.inc.php 121: $root = $parser->parse(file_get_contents($realPath));1830: $out = $this->compile(file_get_contents($fname), $fname);file_put_contents was found in the file lessc.inc.php 1835: return file_put_contents($outFname, $out);file_get_contents was found in the file presets.php 28: $cache = unserialize(file_get_contents($cacheFile));file_put_contents was found in the file presets.php 34: file_put_contents($cacheFile, serialize($newCache));35: file_put_contents($outputFile, $newCache['compiled']);file_put_contents was found in the file presets.php 34: file_put_contents($cacheFile, serialize($newCache));35: file_put_contents($outputFile, $newCache['compiled']);file_get_contents was found in the file TwitterOAuth.php 248: $file = file_get_contents($parameters['media']);fopen was found in the file TwitterOAuth.php 272: $media = fopen($parameters['media'], 'rb');fread was found in the file TwitterOAuth.php 279: 'media_data' => base64_encode(fread($media, self::UPLOAD_CHUNK))fclose was found in the file TwitterOAuth.php 282: fclose($media);file_get_contents was found in the file instagram.php 42: $jsonData = json_decode(file_get_contents($cache));44: $jsonData = json_decode((file_get_contents($url)));file_get_contents was found in the file instagram.php 42: $jsonData = json_decode(file_get_contents($cache));44: $jsonData = json_decode((file_get_contents($url)));file_put_contents was found in the file instagram.php 45: file_put_contents($cache,json_encode($jsonData));file_get_contents was found in the file widgets_import.php 72: $data = file_get_contents( $file );file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );
  5. Malware : Network operations curl_init was found in the file TwitterOAuth.php 393: $curlHandle = curl_init();curl_exec was found in the file TwitterOAuth.php 395: $response = curl_exec($curlHandle);
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File welcome.php : 201: $page = 'add_management_page';File framework.php : 1361: // wrappers and need to be appened to using add_submenu_page.1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile framework.php : 1361: // wrappers and need to be appened to using add_submenu_page.1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile framework.php : 1438: $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $thisFile framework.php : 1361: // wrappers and need to be appened to using add_submenu_page.1412: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1470: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile class-tgm-plugin-activation.php : 731: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_tFile theme-options.php : 1709: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
  7. Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1118: screen_icon();
  8. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.991: $headers = wp_get_http( $url, $upload['file'] );
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was aqua-slider-home-basic.zip aqua-slider-home-shop.zip aqua-slider-home-fullheight.zip home_update_01.zip aqua-slider-home-full-width.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in enqueue.php. Themes must not deregister core scripts. 215: wp_deregister_script( 'jquerySelect2' );Found wp_deregister_script in framework.php. Themes must not deregister core scripts. 565: wp_deregister_script( 'wpb_ace' );
  2. theme tags : Presence of bad theme tagsThe tag black has been deprecated, it must be removed from style.css header.The tag green has been deprecated, it must be removed from style.css header.The tag white has been deprecated, it must be removed from style.css header.The tag light has been deprecated, it must be removed from style.css header.The tag dark has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.Themes that use the tag accessibility-ready will need to undergo an accessibility review.
    See https://make.wordpress.org/themes/handbook/review/accessibility/
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Widgets import file could not be found.' in file widgets_import.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Widgets import data could not be read.' in file widgets_import.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are aqua, preshool, woocommerce, redux-framework, themecheck, js_composer, preschool, restaurant-reservations, trainer, wta, tgmpa, widget-importer-exporter, wordpress-importer.
  4. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  5. Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1118: screen_icon();
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. I18N implementation : Proper use of _e(Possible variable $str found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $arg found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $items found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $string found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $val found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $newUnit found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $res found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $key found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $part found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables.
  8. Screenshot : Screenshot fileScreenshot is wrong size! Detected: 1920x1440px. Maximum allowed size is 1200x900px.
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : single-product.php 15: <?php require('title-bar-shop.php'); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : content-product-update.php 59: <?php include(locate_template('woocommerce/loop/loop-content-shortcode.php')); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : archive-product.php 15: <?php require('title-bar-shop.php'); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : welcome.php 378: require_once 'views/about.php';393: require_once 'views/changelog.php';408: require_once 'views/extensions.php';424: require_once 'views/support.php';439: require_once 'views/credits.php';454: require_once 'views/status_report.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : extension_customizer.php 753: require_once( $class_file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class.redux_api.php 534: include_once( $api_check ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework.php 410: require_once 'core/dashboard.php';414: require_once 'core/newsflash.php';1719: require_once 'core/enqueue.php';2868: require_once 'core/enqueue.php';2926: require_once 'core/panel.php';3278: require_once 'core/panel.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : shape_body_calc.php 33: <?php } else include 'tpl3.php'; ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : product_list.php 163: 323: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl2.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode-4.php')); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl3.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode.php')); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : team.php 53: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : feature_box.php 49: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : booking.php 112: require_once( RTB_PLUGIN_DIR . '/includes/Settings.class.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : grid.php 135: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : testimonial_slider.php 51: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : shortcodes.php 51: include($element .'/'. $element.'.php');61: include($wooshop .'/'. $wooshop.'.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : product_carousel.php 125: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl4.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode-3.php')); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl1.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode.php')); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl2.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode.php')); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tpl3.php 1: <?php include(locate_template('woocommerce/loop/loop-content-shortcode-2.php')); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : service_box.php 36: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog.php 129: 131: 134: 281: 283: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog_grid.php 80: <?php include 'tpl/'.$tpl.'.php'; ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : meta-boxes.php 66: include 'blog_options.php';70: include 'post_default.php';74: include 'post_video.php';78: include 'post_audio.php';82: include 'post_quote.php';86: include 'post_link.php';90: include 'post_team.php';94: include 'post_classes.php';98: include 'post_trainer.php';102: include 'post_events.php';106: include 'post_spa.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : presets.php 3: require_once ( ABS_PATH_FR . '/inc/lessc.inc.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : widgets.php 2: require_once 'socials.php';3: require_once 'new-tabs.php';4: require_once 'opentime.php';5: require_once 'recent-work.php';6: require_once 'list-icon.php';7: require_once 'post-list.php';8: require_once 'mini-cart.php';9: require_once 'woo-ordering.php';10: require_once 'gallery_grid.php';11: require_once 'twitter.php';12: require_once 'instagram.php';13: require_once 'news-letter.php';14: require_once 'trainner.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : twitter.php 2: include_once 'TwitterAPP/Config.php';3: include_once 'TwitterAPP/Response.php';4: include_once 'TwitterAPP/SignatureMethod.php';5: include_once 'TwitterAPP/HmacSha1.php';6: include_once 'TwitterAPP/Consumer.php';7: include_once 'TwitterAPP/Token.php';8: include_once 'TwitterAPP/Request.php';9: include_once 'TwitterAPP/Util.php';10: include_once 'TwitterAPP/Util/JsonDecoder.php';11: require_once 'TwitterAPP/TwitterOAuth.php';12: require_once 'TwitterAPP/TwitterOAuthException.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : index.php 2: require_once(ABS_PATH_ADMIN .'/tgm-plugin-activation/plugin-options.php');3: require_once (ABS_PATH_ADMIN.'/sample/importer.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : importer.php 12: file_exists( $class_wp_importer ) ? require_once($class_wp_importer):$importer_error = true;16: file_exists( $class_wp_import ) ? require_once($class_wp_import): $importer_error = true;91: require_once(ABSPATH .'wp-content/plugins/revslider/admin/revslider-admin.c If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes