0
Validation results

influencer

influencer

WordPress 6.5.2 theme
0
  • THEME TYPEWordPress child theme 6.5.2
  • FILE NAMEsh-influencer-updated 2.zip
  • FILE SIZE6367715 bytes
  • MD5f7da4feec231e7525cbe78c44761bb1d
  • SHA15b219c5526e333eb0d6391e9368101bbb151b7fb
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEME URIhttp://stephaniehellwig.com
  • VERSION1.1.0
  • AUTHOR URI
  • TAGSone-column, two-columns, left-sidebar, right-sidebar, accessibility-ready, custom-background, custom-colors, custom-header, custom-menu, featured-images, full-width-template, sticky-post, theme-options, threaded-comments, translation-ready
  • CREATION DATE2019-09-27
  • LAST FILE UPDATE2019-09-27
  • LAST VALIDATION2019-09-27 20:51
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file customize.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Security breaches : Use of base64_decode() Found base64_decode in file updates.php. 134: $license = maybe_unserialize(base64_decode($license));Found base64_decode in file api-helpers.php. 5148: if( !function_exists('openssl_decrypt') ) return base64_decode($data);5156: list($encrypted_data, $iv) = explode('::', base64_decode($data), 2);
  3. Malware : Operations on file system file_get_contents was found in the file json.php 154: $json = file_get_contents('{$path}/{$file}');fopen was found in the file json.php 227: $f = fopen('{$path}/{$file}', 'w');fwrite was found in the file json.php 228: fwrite($f, acf_json_encode( $field_group ));fclose was found in the file json.php 229: fclose($f);file_get_contents was found in the file class-acf-admin-tool-import.php 102: $json = file_get_contents( $file['tmp_name'] );file_get_contents was found in the file settings-info.php 151: $readme = file_get_contents( acf_get_path('readme.txt') );
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php : 731: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_tFile options-page.php : 158: * add_sub_page170: function add_sub_page( $page ) {342: * alias of acf_options_page()->add_sub_page()356: return acf_options_page()->add_sub_page( $page );File admin-options-page.php : 67: $slug = add_menu_page( $page['page_title'], $page['menu_title'], $page['capability'File admin-options-page.php : 72: $slug = add_submenu_page( $page['parent_slug'], $page['page_title'], $page['menu_tiFile admin-updates.php : 118: $page = add_submenu_page( 'edit.php?post_type=acf-field-group', __('Updates','acf')File admin-tools.php : 116: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Tools','acf'), _File admin.php : 54: add_menu_page(__('Custom Fields','acf'), __('Custom Fields','acf'), $cap, $File admin.php : 58: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),59: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile admin.php : 58: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),59: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile admin-upgrade.php : 47: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade Dat94: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade DatFile admin-upgrade.php : 47: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade Dat94: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade DatFile settings-info.php : 50: add_submenu_page('edit.php?post_type=acf-field-group', __('Info','acf'), __
  5. Deprecated functions : get_bloginfo get_bloginfo( 'stylesheet_directory' ) was found in the file single-portfolio.php. Use get_stylesheet_directory_uri() instead.44: wp_enqueue_script( 'sk-backstretch', get_bloginfo( 'stylesheet_directory' ) . '/js/jquery.backstretch.min.js', aget_bloginfo( 'stylesheet_directory' ) was found in the file functions.php. Use get_stylesheet_directory_uri() instead.351: wp_enqueue_script( 'sk-backstretch', get_bloginfo( 'stylesheet_directory' ) . '/js/jquery.backstretch.min.js', a368: wp_enqueue_script( 'sk-backstretch', get_bloginfo( 'stylesheet_directory' ) . '/js/jquery.backstretch.min.js', aget_bloginfo( 'stylesheet_directory' ) was found in the file archive-portfolio.php. Use get_stylesheet_directory_uri() instead.35: wp_enqueue_script( 'sk-backstretch', get_bloginfo( 'stylesheet_directory' ) . '/js/jquery.backstretch.min.js', a
  6. Deprecated functions : bloginfo bloginfo('url') was found in the file front-page.php. Use echo esc_url( home_url() ) instead.60: <a class= 'button' href='<?php bloginfo('url'); ?>/shop'><?php echo $shop_button_text;?></a>105: <a class= 'button' href='<?php bloginfo('url'); ?>/portfolio'><?php echo $portfolio_button_text;?></a>
Warning
  1. special URIs : Presence of bad theme tagsTheme URI and Author URI should not be the same.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Portfolio page' in file customize.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Portfolio page Banner Image' in file customize.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Set your desired background image for the banner on portfolio page' in file customize.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-gallery.php.Found a translation function that is missing a text-domain. Function _n, with the arguments 'layout', 'layouts' in file class-acf-field-flexible-content.php.Found a translation function that is missing a text-domain. Function _n, with the arguments 'layout', 'layouts' in file class-acf-field-flexible-content.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file api-helpers.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-relationship.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'btn' in file settings-addons.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Apply' in file admin-field-groups.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Bulk Actions' in file admin-field-groups.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are influencer, influencer-pro, tgmpa, elegance, acf, min, Influencer, Influencer-pro.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Unwanted files : hidden file(s) or folder(s).ds_store was found.
  5. PHP short tags : Presence of PHP short tagsPHP short tags were found in file ._woocommerce-notice.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.1:
  6. I18N implementation : Proper use of _e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables. Possible variable $addon found in translation function in settings-addons.php. Translation function calls should not contain PHP variables. Possible variable $attributes found in translation function in field-group-field-conditional-logic.php. Translation function calls should not contain PHP variables.
  7. I18N implementation : Proper use of ___all(Possible variable $string found in translation function in api-helpers.php. Translation function calls should not contain PHP variables.
  8. I18N implementation : Proper use of esc_attr_e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables. Possible variable $attributes found in translation function in field-group-field-conditional-logic.php. Translation function calls should not contain PHP variables.
  9. Date and time implementation : Use of date_i18n()At least one hard coded date was found in the file class-acf-field-date_picker.php. Function get_option( 'date_format' ) should be used instead.
Tip-off
  1. theme tags : Presence of bad theme tagsThemes that use the tag accessibility-ready will need to undergo an accessibility review.
    See https://make.wordpress.org/themes/handbook/review/accessibility/
  2. Use of includes : Use of include or requireThe theme appears to use include or require : acf.php 124: include_once( ACF_PATH . 'includes/api/api-helpers.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : api-helpers.php 393: include_once( $path );414: include_once( $path );613: include( $path );3215: //require_once( ABSPATH . '/wp-load.php' ); // WP should already be loaded3216: require_once( ABSPATH . '/wp-admin/includes/media.php' ); // video function3217: require_once( ABSPATH . '/wp-admin/includes/file.php' );3218: require_once( ABSPATH . '/wp-admin/includes/image.php' );4619: include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes