0
Validation results

Directorybox

Directorybox

WordPress 6.4.3 theme
0
  • THEME TYPEWordPress theme 6.4.3
  • FILE NAMEDirectory_[v1.3].zip
  • FILE SIZE61906578 bytes
  • MD5b10256a689bf135354a812e2d969abd6
  • SHA12e5a193b723a71a17db77c479a09ede7f5d00369
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, HTML, XML, Bitmap images, Adobe Illustrator
  • THEME URIhttp://www.chimpstudio.co.uk/
  • VERSION1.3
  • TAGStwo-columns, left-sidebar, custom-background, custom-colors, custom-header, custom-menu, editor-style, featured-images, microformats, post-formats, rtl-language-support, sticky-post, threaded-comments, translation-ready
  • CREATION DATE2019-08-26
  • LAST FILE UPDATE2019-08-26
  • LAST VALIDATION2019-08-26 12:52
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file OAuth.php. 183: $decoded_sig = base64_decode($signature);
  2. Security breaches : Use of base64_encode() Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
    Found base64_encode in file tmhOAuth.php.
     base64_encode(
     return base64_encode($credentials);
  3. Malware : Operations on file system file_get_contents was found in the file google_fonts.php 32: //$response = file_get_contents($cachefile);fopen was found in the file geoplugin.class.php 100: } else if (ini_get('allow_url_fopen')) {102: //fall back to fopen()106: trigger_error('geoPlugin class Error: Cannot retrieve data. Either compile PHP with cURL support or enable allow_url_fopen in php.ini ', E_USER_ERROR);file_get_contents was found in the file geoplugin.class.php 103: $response = file_get_contents($host, 'r');fopen was found in the file class-import-user.php 41: $file_handle = fopen(get_template_directory_uri() . '/include/theme-components/import-userfclose was found in the file class-import-user.php 180: fclose($file_handle);fopen was found in the file header_functions.php 878: $image_exsist = @fopen($header_banner_image, 'r');file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );file_get_contents was found in the file functions.php 962: $geocode = file_get_contents( cs_server_protocol() . 'maps.google.com/maps/api/geocode
  4. Malware : Network operations curl_init was found in the file mailchimp.class.php 51: $ch = curl_init();curl_exec was found in the file mailchimp.class.php 60: $result = curl_exec($ch);curl_init was found in the file geoplugin.class.php 91: if (function_exists('curl_init')) {94: $ch = curl_init();curl_exec was found in the file geoplugin.class.php 98: $response = curl_exec($ch);curl_init was found in the file twitteroauth.php 172: $ci = curl_init();curl_exec was found in the file twitteroauth.php 196: $response = curl_exec($ci);curl_init was found in the file tmhOAuth.php 718: $c = curl_init();curl_exec was found in the file tmhOAuth.php 782: $response = curl_exec($c);
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File functions.php : 415: //add_submenu_page('wp_dp_directory', $wp_dp_cs_var_theme_options, $wp_dp_cs_
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was wp-directory.zip header_functions.zip woocommerce-single-product.zip hotel.zip directory.zip education.zip motors.zip directory-theme.zip wp-directorybox-manager.zip cs-icons-manager.zip directorybox-framework.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in functions.php. Themes must not deregister core scripts. 1725: wp_deregister_script( 'heartbeat' );
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'dir' in file header_functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'dir' in file header_functions.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Showing result for', , 'dir' in file search.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file functions.php.Found a translation function that has an incorrect number of arguments. Function _e, with the arguments 'No pages were found containing', , 'dir' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are dir, , pc, wordpress-importer, Awaken, directory, directorybox, woocommerce.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Unwanted files : Windows thumbnail storethumbs.db was found.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  6. I18N implementation : Proper use of ___all(Possible variable $cs_post_ad_title found in translation function in header_functions.php. Translation function calls should not contain PHP variables. Possible variable $cs_post_ad_title found in translation function in header_functions.php. Translation function calls should not contain PHP variables.
  7. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : index.php 25: require_once('geoplugin.class.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : display-tweets.php 43: require_once (ABSPATH . '/wp-admin/includes/file.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : twitteroauth.php 7: require_once 'OAuth.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : OAuth.php 220: require_once (ABSPATH . '/wp-admin/includes/file.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : page_contact_submit.php 6: require_once '../../../wp-load.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header.php 35: include 'include/global_variables.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : single-idx.php 64: include(locate_template('sidebar.php')); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes