Validation results

My Listing

16 WARNINGS

My Listing

WordPress 6.7 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.7
FILE NAMEmy-listing.zip
FILE SIZE6461817 bytes
MD5acccf5606e99bc5cc798060dea6c468f
SHA1496503c31954b95170a60d983a47b61aa1c1ac20
LICENSEGNU GPL 2
FILES INCLUDEDCSS, PHP, HTML, Bitmap images
THEME URIhttp://mylisting.27collective.net/my-city/
VERSION2.1.7
AUTHOR URIhttp://27collective.net/
TAGSone-column, two-columns, three-columns, left-sidebar, right-sidebar, grid-layout, custom-menu, custom-logo, featured-images, footer-widgets, full-width-template, sticky-post, theme-options, threaded-comments, translation-ready
CREATION DATE2019-09-18
LAST FILE UPDATE2019-09-18
LAST VALIDATION2019-09-18 19:45
OTHER VERSIONS
2.9.2 : 0%
2.9.10 : 0%
2.8 : 0%
2.6.6 : 0%
2.6.4 : 0%
2.4.6 : 0%
2.4.4 : 0%
2.4.2 : 0%
2.0.6 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
Security breaches : Modification of PHP server settings Found ini_set in file OneClickDemoImport.php. 214: ini_set( 'memory_limit', apply_filters( 'pt-ocdi/import_memory_limit', '350Found ini_set in file ajax.php. 52: @ini_set( 'display_errors', 0 );
Security breaches : Use of base64_decode() Found base64_decode in file updates.php. 134: $license = maybe_unserialize(base64_decode($license));Found base64_decode in file api-helpers.php. 5198: if( !function_exists('openssl_decrypt') ) return base64_decode($data);5206: list($encrypted_data, $iv) = explode('::', base64_decode($data), 2);Found base64_decode in file schema.php. 54: $compiled_value = json_decode( base64_decode( $compiled_value ) );

Security breaches : Use of base64_encode() Found base64_encode in file updates.php.

 $value = base64_encode(maybe_serialize($data));

Found base64_encode in file api-helpers.php.

 if( !function_exists('openssl_encrypt') ) return base64_encode($data);

 return base64_encode($encrypted_data . '::' . $iv);

Found base64_encode in file schema.php.

 $value = $this->hash . base64_encode( json_encode( $value ) );

Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://my.timekit.io/<?php echo esc_attr( $timekitID ) ?> in file listing.php. 750: <iframe src='https://my.timekit.io/<?php echo esc_attr( $timekitID ) ?>' frFound <iframe src="<?php echo esc_attr( $video['url'] ) ?> in file video-block.php. 26: <iframe src='<?php echo esc_attr( $video['url'] ) ?>' frameborder='0' allow
Malware : Operations on file system file_get_contents was found in the file json.php 155: $json = file_get_contents('{$path}/{$file}');fopen was found in the file json.php 228: $f = fopen('{$path}/{$file}', 'w');fwrite was found in the file json.php 229: fwrite($f, acf_json_encode( $field_group ));fclose was found in the file json.php 230: fclose($f);file_get_contents was found in the file class-acf-admin-tool-import.php 129: $json = file_get_contents( $file['tmp_name'] );file_get_contents was found in the file settings-info.php 151: $readme = file_get_contents( acf_get_path('readme.txt') );file_get_contents was found in the file admin.php 246: $doc_contents = file_get_contents( $doc_file );file_get_contents was found in the file assets.php 224: preg_replace( '/\s+/S', ' ', file_get_contents( locate_template( 'assets/dynamic/element-queries'.$suffifile_put_contents was found in the file assets.php 244: file_put_contents( trailingslashit( $upload_dir['basedir'] ) . 'mylisting-d
Admin menu : Themes should use add_theme_page() for adding admin pages. File buddypress.php : 16: add_action( 'bp_setup_nav', [ $this, 'add_listings_page' ] );26: public function add_listings_page() {File options-page.php : 158: * add_sub_page170: function add_sub_page( $page ) {342: * alias of acf_options_page()->add_sub_page()356: return acf_options_page()->add_sub_page( $page );File admin-options-page.php : 67: $slug = add_menu_page( $page['page_title'], $page['menu_title'], $page['capability'File admin-options-page.php : 72: $slug = add_submenu_page( $page['parent_slug'], $page['page_title'], $page['menu_tiFile admin-settings-updates.php : 162: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Updates','acf'),File admin-tools.php : 116: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Tools','acf'), _File admin.php : 113: add_menu_page(__('Custom Fields','acf'), __('Custom Fields','acf'), $cap, $File admin.php : 117: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),118: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile admin.php : 117: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),118: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile admin-upgrade.php : 47: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade Dat94: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade DatFile admin-upgrade.php : 47: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade Dat94: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade DatFile settings-addons.php : 51: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Add-ons','acf'),File settings-info.php : 50: add_submenu_page('edit.php?post_type=acf-field-group', __('Info','acf'), __File advanced-custom-fields.php : 28: add_action( 'mylisting/init', [ $this, 'add_integrations_page' ] );69: public function add_integrations_page() {File custom-taxonomies.php : 29: add_action( 'admin_menu', [ $this, 'add_settings_page' ], 30 );163: public function add_settings_page() {File custom-taxonomies.php : 164: add_submenu_page(File OneClickDemoImport.php : 143: $this->plugin_page = add_submenu_page(File package.php : 101: add_submenu_page(File user-packages.php : 182: add_submenu_page(File wcpl-importer.php : 24: add_action( 'admin_menu', [ $this, 'add_migration_page' ], 999 );35: public function add_migration_page() {File wcpl-importer.php : 37: add_submenu_page(File reports-screen.php : 53: add_submenu_page(File view-claims-screen.php : 42: add_submenu_page(File settings-screen.php : 76: add_action( 'admin_menu', [ $this, 'add_settings_page' ], 20 );98: public function add_settings_page() {File settings-screen.php : 99: add_submenu_page(File shortcodes.php : 15: add_action( 'admin_menu', [ $this, 'add_shortcodes_page' ], 50 );27: public function add_shortcodes_page() {

Warning

core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in assets.php. Themes must not deregister core scripts. 96: * Select2 - first use wp_deregister_script to unset select2 loaded99: wp_deregister_script( 'select2' );
theme tags : Presence of bad theme tagsFound wrong tag custom-logo in style.css header.
Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Use this option to display the date in a box layout, if possible. Otherwise, it will be plain text.' in file format.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-gallery.php.Found a translation function that is missing a text-domain. Function _n, with the arguments 'layout', 'layouts' in file class-acf-field-flexible-content.php.Found a translation function that is missing a text-domain. Function _n, with the arguments 'layout', 'layouts' in file class-acf-field-flexible-content.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file api-helpers.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-relationship.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'btn' in file settings-addons.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Apply' in file admin-field-groups.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Bulk Actions' in file admin-field-groups.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Taxonomy plural name', 'my-listing' in file custom-taxonomies.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Taxonomy singular name', 'my-listing' in file custom-taxonomies.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'my-listing' in file custom-taxonomies.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'my-listing' in file messages.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Cannot import auto-draft posts' in file src/WXRImporter.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Skipping attachment "%s", fetching attachments disabled' in file src/WXRImporter.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Promotions: buy package', 'my-listing' in file promotions.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'View All Packages.' in file wcpl-importer.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'IMPORTANT: Please backup all your database before performing this action.' in file wcpl-importer.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are my-listing, acf, min, wordpress-importer, pt-ocdi, wcvendors, my-listings, elementor, plugin-domain, your-plugin.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
PHP short tags : Presence of PHP short tagsPHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.829: if (preg_match('/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches))
Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file frontend-rtl.css.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
I18N implementation : Proper use of _e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $wrapper found in translation function in api-field.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables. Possible variable $addon found in translation function in settings-addons.php. Translation function calls should not contain PHP variables. Possible variable $attributes found in translation function in field-group-field-conditional-logic.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of ___all(Possible variable $string found in translation function in api-helpers.php. Translation function calls should not contain PHP variables. Possible variable $title found in translation function in custom-taxonomies.php. Translation function calls should not contain PHP variables. Possible variable $name found in translation function in messages.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of _x(Possible variable $title found in translation function in custom-taxonomies.php. Translation function calls should not contain PHP variables. Possible variable $title found in translation function in custom-taxonomies.php. Translation function calls should not contain PHP variables. Possible variable $listing found in translation function in promotions.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of _ex(Possible variable $product found in translation function in choose-promotion.php. Translation function calls should not contain PHP variables. Possible variable $duration found in translation function in choose-promotion.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of esc_attr_e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $wrapper found in translation function in api-field.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables. Possible variable $attributes found in translation function in field-group-field-conditional-logic.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of esc_html___all(Possible variable $name found in translation function in messages.php. Translation function calls should not contain PHP variables.
Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
Date and time implementation : Use of date_i18n()At least one hard coded date was found in the file class-acf-field-date_picker.php. Function get_option( 'date_format' ) should be used instead.
Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file single-pages.php.3: <span class='subtitle'>Not sure what's this? <a href='https://docs.mylistingtheme.com/article/single-page-content-and-tabs/' targPossible hard-coded links were found in the file settings.php.49: Structured data helps search engines understand the contents of listings, and display better search results. <a href='https://developers.google.com/search/docs/guides/intro-structured-data' tar51: <strong><a href='http://schema.org/docs/full.html' target='_blank'>Click here</a></strong> tPossible hard-coded links were found in the file single-style.php.12: <span class='subtitle'>Not sure what's this? <a href='http://docs.mylistingtheme.com/article/single-page-tab-cover-style-cover-dePossible hard-coded links were found in the file fields.php.6: <span class='subtitle'>Need help? Read the <a href='https://docs.mylistingtheme.com/article/listing-type-fields-tab/' target='_Possible hard-coded links were found in the file preview-card.php.19: <span class='subtitle'>Need help? Read the <a href='http://docs.mylistingtheme.com/article/configuring-the-preview-card-results251: <span class='subtitle'>Need help? Read the <a href='http://docs.mylistingtheme.com/article/configuring-the-preview-card-results19: <span class='subtitle'>Need help? Read the <a href='http://docs.mylistingtheme.com/article/configuring-the-preview-card-results251: <span class='subtitle'>Need help? Read the <a href='http://docs.mylistingtheme.com/article/configuring-the-preview-card-resultsPossible hard-coded links were found in the file forms.php.8: <span class='subtitle'>Not sure what's this? <a href='https://docs.mylistingtheme.com/article/configuring-search-forms/' target='13: <span class='subtitle'>Not sure what's this? <a href='https://docs.mylistingtheme.com/article/configuring-search-forms/' target='8: <span class='subtitle'>Not sure what's this? <a href='https://docs.mylistingtheme.com/article/configuring-search-forms/' target='13: <span class='subtitle'>Not sure what's this? <a href='https://docs.mylistingtheme.com/article/configuring-search-forms/' target='Possible hard-coded links were found in the file my-home.php.60: 'footer_text' => '© Made with <i class='fa fa-heart-o' style='color: #f2498b;'></i> by <a href='http://27collective.net' target='_blank'>27collective</a>',Possible hard-coded links were found in the file Helpers.php.300: '<a href='http://gregorcapuder.com/wordpress-how-to-set-direct-filesystem-method/' taPossible hard-coded links were found in the file profile-screen.php.17: $avatars['mylisting_user_initials'] = sprintf( __( 'User Initials (Generated through %s)', 'my-listing' ), '<a href='https://ui-avatars.com/' target='_blank'>UI Avatars</a>' );235: return 'https://ui-avatars.com/api/' . join( '/', $query_args );
Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Use of includes : Use of include or requireThe theme appears to use include or require : acf.php 125: include_once( ACF_PATH . 'includes/api/api-helpers.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : api-helpers.php 428: include_once( $path );449: include_once( $path );656: include( $path );3258: //require_once( ABSPATH . '/wp-load.php' ); // WP should already be loaded3259: require_once( ABSPATH . '/wp-admin/includes/media.php' ); // video function3260: require_once( ABSPATH . '/wp-admin/includes/file.php' );3261: require_once( ABSPATH . '/wp-admin/includes/image.php' );4669: include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : reviews.php 455: require_once( ABSPATH . 'wp-admin/includes/image.php' );456: require_once( ABSPATH . 'wp-admin/includes/file.php' );457: require_once( ABSPATH . 'wp-admin/includes/media.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : messages.php 790: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : CustomizerImporter.php 186: require_once( ABSPATH . 'wp-admin/includes/media.php' );187: require_once( ABSPATH . 'wp-admin/includes/file.php' );188: require_once( ABSPATH . 'wp-admin/includes/image.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : helpers.php 184: include_once( ABSPATH . 'wp-admin/includes/file.php' );185: include_once( ABSPATH . 'wp-admin/includes/media.php' );186: include_once( ABSPATH . 'wp-admin/includes/image.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.7 theme

VIEW ALL THEMES