0
Validation results

Avada

Avada

WordPress 6.7.1 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  2. Security breaches : Use of base64_decode() Found base64_decode in file functions.interface.php. 300: $smof_data = unserialize(base64_decode($imported_data)); //100% safe - ignore theme check nagFound base64_decode in file importer.php. 418: $smof_data = unserialize( base64_decode( $theme_options_txt ) );
  3. Security breaches : Use of base64_encode() Found base64_encode in file class.options_machine.php.
     $output .= '<textarea id='export_data' rows='8'>'.base64_encode(serialize($smof_data)) /* 100% safe - ignore theme check nag 
    Found base64_encode in file class-fusion-widget-tweets.php.
     $toSend = base64_encode( $credentials );
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe frameborder="0" height="100%" width="100%" src="<?php echo $protocol ?> in file custom_functions.php. 400: <iframe frameborder='0' height='100%' width='100%' src='<?php echo $protoco
  5. Malware : Operations on file system file_get_contents was found in the file importer.php 417: $theme_options_txt = file_get_contents( $theme_options_txt );441: $widgets_json = file_get_contents( $widgets_json );file_get_contents was found in the file importer.php 417: $theme_options_txt = file_get_contents( $theme_options_txt );441: $widgets_json = file_get_contents( $widgets_json );file_get_contents was found in the file parsers.php 69: $success = $dom->loadXML( file_get_contents( $file ) );273: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 69: $success = $dom->loadXML( file_get_contents( $file ) );273: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 421: $fp = $this->fopen( $file, 'r' );647: function fopen( $filename, $mode = 'r' ) {650: return fopen( $filename, $mode );fclose was found in the file parsers.php 470: $this->fclose($fp);665: function fclose( $fp ) {668: return fclose( $fp );fopen was found in the file parsers.php 421: $fp = $this->fopen( $file, 'r' );647: function fopen( $filename, $mode = 'r' ) {650: return fopen( $filename, $mode );fopen was found in the file parsers.php 421: $fp = $this->fopen( $file, 'r' );647: function fopen( $filename, $mode = 'r' ) {650: return fopen( $filename, $mode );fclose was found in the file parsers.php 470: $this->fclose($fp);665: function fclose( $fp ) {668: return fclose( $fp );fclose was found in the file parsers.php 470: $this->fclose($fp);665: function fclose( $fp ) {668: return fclose( $fp );fopen was found in the file class-avada-theme-updater.php 58: /*$handle = fopen($filename, 'a');fwrite was found in the file class-avada-theme-updater.php 59: fwrite($handle, json_encode($request_string));60: fwrite($handle, json_encode($raw_response));*/fwrite was found in the file class-avada-theme-updater.php 59: fwrite($handle, json_encode($request_string));60: fwrite($handle, json_encode($raw_response));*/
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File avada.php : 166: $avada_menu_page_creation_method = 'add_menu_page';File avada.php : 167: $avada_submenu_page_creation_method = 'add_submenu_page';File class-avada-layout-bbpress.php : 31: add_action( 'bbp_template_before_search', array( $this, 'add_search_page_search_form' ) );118: public function add_search_page_search_form() {File class-tgm-plugin-activation.php : 641: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
  7. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.905: $headers = wp_get_http( $url, $upload['file'] );
  8. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file form-edit-address.php. Deprecated since version 4.5. Use wp_get_current_user instead.18: get_currentuserinfo();get_currentuserinfo found in file form-edit-address.php. Deprecated since version 4.5. Use wp_get_current_user instead.18: get_currentuserinfo();
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip fusion_slider.zip captions_tall.zip avada_full_width.zip avada_small_slider.zip avada_page_slider.zip layerslider_export_2015-07-10_at_11.44.29.zip layerslider.zip fusion-core.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in class-avada-scripts.php. Themes must not deregister core scripts. 33: wp_deregister_script( 'novagallery_modernizr' );37: wp_deregister_script( 'ccgallery_modernizr' );49: wp_deregister_script( 'wc-cart-fragments' );56: wp_deregister_script( 'bootstrap' );60: wp_deregister_script( 'cssua' );64: wp_deregister_script( 'easyPieChart' );68: wp_deregister_script( 'excanvas' );72: wp_deregister_script( 'Froogaloop' );76: wp_deregister_script( 'imagesLoaded' );80: wp_deregister_script( 'jquery.infinitescroll' );84: wp_deregister_script( 'isotope' );88: wp_deregister_script( 'jquery.appear' );92: wp_deregister_script( 'jquery.touchSwipe' );96: wp_deregister_script( 'jquery.carouFredSel' );100: wp_deregister_script( 'jquery.countTo' );104: wp_deregister_script( 'jquery.countdown' );108: wp_deregister_script( 'jquery.cycle' );112: wp_deregister_script( 'jquery.easing' );116: wp_deregister_script( 'jquery.elasticslider' );120: wp_deregister_script( 'jquery.fitvids' );124: wp_deregister_script( 'jquery.flexslider' );128: wp_deregister_script( 'jquery.fusion_maps' );132: wp_deregister_script( 'jquery.hoverflow' );136: wp_deregister_script( 'jquery.hoverIntent' );140: wp_deregister_script( 'jquery.placeholder' );144: wp_deregister_script( 'jquery.toTop' );148: wp_deregister_script( 'jquery.waypoints' );152: wp_deregister_script( 'modernizr' );156: wp_deregister_script( 'jquery.requestAnimationFrame' );160: wp_deregister_script( 'jquery.mousewheel' );165: wp_deregister_script( 'ilightbox.packed' );170: wp_deregister_script( 'avada-lightbox' );174: wp_deregister_script( 'avada-header' );178: wp_deregister_script( 'avada-select' );182: wp_deregister_script( 'avada-parallax' );186: wp_deregister_script( 'avada-video-bg' );223: wp_deregister_script( 'avada' );
  2. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  3. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is avada.
  4. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments 'View 1 %1$s', 'View All %2$s %3$s', total_events, 'tribe-events-calendar' in file single-day.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are Avada, tribe-events-calendar, total_events, tribe-events-calendar-pro, woocommerce, wordpress-importer, bbpress, shoestrap, tgmpa, Aavada, sermon-manager.
  5. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  6. Unwanted files : hidden file(s) or folder(s).ds_store was found.
  7. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  8. Deprecated functions : post_permalinkpost_permalink found in file avada-functions.php. Deprecated since version 4.4. Use get_permalink instead.254: function avada_render_rollover( $post_id, $post_permalink = '', $display_woo_price = false, $display_woo_buttons = fal256: if ( ! $post_permalink ) {257: $post_permalink = get_permalink( $post_id );279: $icon_permalink = ( fusion_get_page_option( 'link_icon_url', $post_id ) != null ) ? fusion_get_page_option( 'link_icon_url', $post_id ) : $post_permalink;378: <a class='fusion-show-details-button' href='<?php echo post_permalink(); ?>'><?php _e( 'Details', 'Avada' ); ?></a>417: * @param string $post_permalink Permalink of current post427: function avada_render_first_featured_image_markup( $post_id, $post_featured_image_size = '', $post_permalink = '', $display_placeholder_image = FALSE, $display_woo_price486: do_action( 'avada_rollover', $post_id, $post_permalink, $display_woo_price, $display_woo_buttons, $display_post_cat493: $html .= sprintf( '<a href='%s'>%s</a>', $post_permalink, $featured_image );
  9. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  10. CSS files : Presence of .screen-reader-text class.screen-reader-text css class is needed in your theme css. See : the Codex for an example implementation.
  11. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in header.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  10. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  11. Use of includes : Use of include or requireThe theme appears to use include or require : index.php 135: require_once ( ADMIN_PATH . 'functions/functions.load.php' );136: require_once ( ADMIN_PATH . 'classes/class.options_machine.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : functions.load.php 10: require_once( ADMIN_PATH . 'functions/functions.php' );11: require_once( ADMIN_PATH . 'functions/functions.filters.php' );12: require_once( ADMIN_PATH . 'functions/functions.interface.php' );13: require_once( ADMIN_PATH . 'functions/functions.options.php' );14: require_once( ADMIN_PATH . 'functions/functions.admin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : functions.interface.php 148: include_once( ADMIN_PATH . 'front-end/options.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : fusion-functions.php 855: require_once(ABSPATH . 'wp-admin/includes/file.php');905: require_once( ABSPATH . 'wp-admin/includes/image.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : importer.php 770: require_once( ABSPATH . 'wp-admin/includes/image.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : mega-menu-framework.php 83: require_once( 'mega-menus.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : fusion-framework.php 34: require( 'fusion-functions.php' );41: require_once ( 'avada-admin/avada.php' );48: require_once ( 'ajax-functions.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : avada.php 186: require_once( 'screens/welcome.php' );190: require_once( 'screens/support.php' );194: require_once( 'screens/install-demos.php' );198: require_once( 'screens/fusion-plugins.php' );202: require_once( 'screens/system-status.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : metaboxes.php 94: include 'options/options_es.php';98: include 'options/options_slide.php';140: <?php require_once( 'tabs/tab_' . $tab_name . '.php' ); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-avada-contact.php 27: // require_once( trailingslashit( get_template_directory() ) . 'framework/reca If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-avada-dynamic-css.php 169: require_once( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : contact.php 10: require_once( 'framework/recaptchalib.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes