Theme Check - Version 20210617

Version Description

Release Info

Developer	githubsync
Plugin	Theme Check
Version	20210617
Comparing to
See all releases

Code changes from version 20200922.1 to 20210617

Files changed (105) hide show

README.md +54 -0
checkbase.php +170 -135
checks/admin_menu.php +0 -73
checks/adminbar.php +0 -55
checks/badthings.php +0 -60
checks/basic.php +0 -47
checks/cdn.php +0 -45
checks/class-admin-menu-check.php +107 -0
checks/class-bad-things-check.php +114 -0
checks/class-basic-check.php +84 -0
checks/class-block-patterns-check.php +62 -0
checks/class-cdn-check.php +79 -0
checks/class-comment-pagination-check.php +62 -0
checks/class-comment-reply-check.php +63 -0
checks/class-comments-check.php +67 -0
checks/class-constants-check.php +83 -0
checks/class-customizer-check.php +99 -0
checks/class-deprecated-check.php +1201 -0
checks/{more_deprecated.php → class-deprecated-param-check.php} +43 -9
checks/class-deregister-check.php +45 -0
checks/class-directories-check.php +73 -0
checks/class-editor-style-check.php +55 -0
checks/{escaping.php → class-escaping-check.php} +122 -105
checks/class-favicon-check.php +66 -0
checks/{filenames.php → class-file-check.php} +53 -18
checks/class-filesystem-http-check.php +81 -0
checks/class-fse-required-files-check.php +63 -0
checks/class-generated-check.php +74 -0
checks/class-gravatar-check.php +56 -0
checks/class-i18n-check.php +103 -0
checks/class-iframe-check.php +70 -0
checks/class-include-check.php +69 -0
checks/class-included-zip-check.php +69 -0
checks/class-line-endings-check.php +92 -0
checks/class-link-check.php +93 -0
checks/class-nav-menu-check.php +127 -0
checks/class-no-hidden-admin-bar-check.php +86 -0
checks/class-non-gpl-check.php +75 -0
checks/class-non-printable-check.php +61 -0
checks/class-php-short-tags-check.php +58 -0
checks/{plugin-territory.php → class-plugin-territory-check.php} +39 -10
checks/class-post-format-check.php +77 -0
checks/class-post-pagination-check.php +60 -0
checks/class-post-thumbnail-check.php +63 -0
checks/class-screen-reader-text-check.php +60 -0
checks/class-screenshot-check.php +102 -0
checks/class-script-tag-check.php +64 -0
checks/class-search-form-check.php +86 -0
checks/{siteurl.php → class-site-url-check.php} +59 -54
checks/class-style-css-header-check.php +68 -0
checks/class-style-tags-check.php +238 -0
checks/class-suggested-styles-check.php +78 -0
checks/class-tag-check.php +41 -0
checks/class-theme-support-check.php +64 -0
checks/class-theme-support-title-tag.php +53 -0
checks/class-time-date-check.php +67 -0
checks/class-title-check.php +82 -0
checks/class-underscores-check.php +115 -0
checks/class-uri-check.php +81 -0
checks/class-widgets-check.php +103 -0
checks/class-worms-check.php +61 -0
checks/comment_reply.php +0 -27
checks/commpage.php +0 -26
checks/constants.php +0 -41
checks/content-width.php +16 -8
checks/customizer.php +0 -59
checks/customs.php +0 -26
checks/dep_recommend.php +0 -67
checks/deprecated.php +0 -345
checks/deregister.php +0 -29
checks/directories.php +0 -36
checks/editorstyle.php +0 -21
checks/favicon.php +0 -33
checks/generated.php +0 -42
checks/gravatar.php +0 -24
checks/i18n.php +0 -70
checks/iframes.php +0 -29
checks/include.php +0 -29
checks/included-plugins.php +0 -34
checks/lineendings.php +0 -43
checks/links.php +0 -34
checks/malware.php +0 -34
checks/navmenu.php +0 -73
checks/nongplsites.php +0 -46
checks/nonprintable.php +0 -27
checks/phpshort.php +0 -24
checks/post-formats.php +0 -38
checks/postsnav.php +0 -28
checks/postthumb.php +0 -27
checks/screenshot.php +0 -45
checks/searchform.php +0 -26
checks/style_needed.php +0 -43
checks/style_suggested.php +0 -29
checks/style_tags.php +0 -158
checks/tags.php +0 -22
checks/textdomain.php +138 -92
checks/time_date.php +0 -31
checks/title.php +0 -70
checks/underscores.php +0 -57
checks/uri.php +0 -31
checks/widgets.php +0 -42
checks/worms.php +0 -33
main.php +147 -187
readme.txt +3 -3
theme-check.php +7 -5

README.md ADDED Viewed

	@@ -0,0 +1,54 @@


1	+ # Theme Check
2	+
3	+ The theme check plugin is an easy way to test your theme and make sure it's up to spec with the latest [theme review](https://make.wordpress.org/themes/handbook/review/) standards. With it, you can run all the same automated testing tools on your theme that WordPress.org uses for theme submissions.
4	+
5	+ The tests are run through a simple admin menu and all results are displayed at once. This is very handy for theme developers, or anybody looking to make sure that their theme supports the latest WordPress theme standards and practices.
6	+
7	+ ## Frequently Asked Questions
8	+
9	+ ### Why does it flag something as bad?
10	+
11	+ It's not flagging "bad" things, as such. The theme check is designed to be a non-perfect way to test for compliance with the [Theme Review](https://make.wordpress.org/themes/handbook/review/) guidelines. Not all themes must adhere to these guidelines. The purpose of the checking tool is to ensure that themes uploaded to the central [WordPress.org theme repository](http://wordpress.org/themes/) meet the latest standards of WordPress themes and will work on a wide variety of sites.
12	+
13	+ Many sites use customized themes, and that's perfectly okay. But themes that are intended for use on many different kinds of sites by the public need to have a certain minimum level of capabilities, in order to ensure proper functioning in many different environments. The Theme Review guidelines are created with that goal in mind.
14	+
15	+ This theme checker is not perfect, and never will be. It is only a tool to help theme authors, or anybody else who wants to make their theme more capable. All themes submitted to WordPress.org are hand-reviewed by a team of experts. The automated theme checker is meant to be a useful tool only, not an absolute system of measurement.
16	+
17	+ This plugin does not decide the guidelines used. Any issues with particular theme review guidelines should be discussed on the [Make Themes site](https://make.wordpress.org/themes), or [https://github.com/WPTRT/Theme-Requirements](https://github.com/WPTRT/Theme-Requirements)
18	+
19	+ ## Other Notes
20	+
21	+ ### How to enable trac formatting
22	+ The Theme Review team use this plugin while reviewing themes and copy/paste the output into trac tickets, the trac system has its own markup language.
23	+ To enable trac formatting in Theme-Check you need to define a couple of variables in wp-config.php:
24	+ TC_PRE and TC_POST are used as a ticket header and footer.
25	+ Examples:
26	+ ```
27	+ define( 'TC_PRE', 'Theme Review:[[br]]
28	+ - Themes should be reviewed using "define(\'WP_DEBUG\', true);" in wp-config.php[[br]]
29	+ - Themes should be reviewed using the test data from the Theme Checklists (TC)
30	+ -----
31	+ ' );
32	+ ```
33	+
34	+ ```
35	+ define( 'TC_POST', 'Feel free to make use of the contact details below if you have any questions,
36	+ comments, or feedback:[[br]]
37	+ [[br]]
38	+ * Leave a comment on this ticket[[br]]
39	+ * Send an email to the Theme Review email list[[br]]
40	+ * Use the #wordpress-themes IRC channel on Freenode.' );
41	+ ```
42	+
43	+ If either of these two vars are defined a new trac tickbox will appear next to the Check it! button.
44	+
45	+ If you want to exclude checking other files in development directories return `true` for the filter `tc_skip_development_directories`.
46	+
47	+ ```
48	+ add_filter( 'tc_skip_development_directories', '__return_true' );
49	+ ```
50	+
51	+ To add more directories to the paths where other files are excluded then add them to the array through the `tc_common_dev_directories` filter.
52	+
53	+ ## Contributors
54	+ Otto42, pross, The theme review team

checkbase.php CHANGED Viewed

@@ -1,9 +1,18 @@
             <?php
-            -
            // main global to hold our checks
             global $themechecks;
             $themechecks = array();
-            -
            // counter for the checks
             global $checkcount;
             $checkcount = 0;
@@ -18,21 +27,83 @@ interface themecheck {
+            }
             // load all the checks in the checks directory.
-            -
            $dir = 'checks';
-            -
            foreach ( glob( dirname( __FILE__ ) . "/{$dir}/*.php" ) as $file ) {
             	include $file;
+            }
             do_action( 'themecheck_checks_loaded' );
-            -
            function run_themechecks( $php, $css, $other ) {
             	global $themechecks;
             	$pass = true;
             	foreach ( $themechecks as $check ) {
             		if ( $check instanceof themecheck ) {
             			$pass = $pass & $check->check( $php, $css, $other );
+            		}
+            	}
             	return $pass;
+            }
@@ -93,7 +164,7 @@ function tc_grep( $error, $file ) {
             			$error      = str_replace( '"', "'", $error );
             			$this_line  = str_replace( '"', "'", $this_line );
             			$error      = ltrim( $error );
-            -
            			$pos = strpos( $this_line, $error );
             			$pre        = ( false !== $pos ? substr( $this_line, 0, $pos ) : false );
             			$pre        = ltrim( htmlspecialchars( $pre ) );
             			$bad_lines .= "<pre class='tc-grep'>" . __( 'Line ', 'theme-check' ) . ( $line_index + 1 ) . ': ' . $pre . htmlspecialchars( substr( stristr( $this_line, $error ), 0, 75 ) ) . '</pre>';
@@ -149,152 +220,116 @@ function tc_trac( $e ) {
             	return $e;
+            }
-            -
            function listdir( $dir ) {
-            -
            	$files        = array();
-            -
            	$dir_iterator = new RecursiveDirectoryIterator( $dir );
-            -
            	$iterator     = new RecursiveIteratorIterator( $dir_iterator, RecursiveIteratorIterator::SELF_FIRST );
-            -
-            -
            	foreach ( $iterator as $file ) {
-            -
            		array_push( $files, $file->getPathname() );
-            -
            	}
-            -
            	return $files;
-            -
            }
-            -
-            -
            function get_theme_data_from_contents( $theme_data ) {
-            -
            	$themes_allowed_tags = array(
-            -
            		'a'       => array(
-            -
            			'href'  => array(),
-            -
            			'title' => array(),
-            -
            		),
-            -
            		'abbr'    => array(
-            -
            			'title' => array(),
-            -
            		),
-            -
            		'acronym' => array(
-            -
            			'title' => array(),
-            -
            		),
-            -
            		'code'    => array(),
-            -
            		'em'      => array(),
-            -
            		'strong'  => array(),
             	);
-            -
-            -
            	$theme_data = str_replace( '\r', '\n', $theme_data );
-            -
            	preg_match( '|^[ \t\/*#@]*Theme Name:(.*)$|mi', $theme_data, $theme_name );
-            -
            	preg_match( '|^[ \t\/*#@]*Theme URI:(.*)$|mi', $theme_data, $theme_uri );
-            -
            	preg_match( '|^[ \t\/*#@]*Description:(.*)$|mi', $theme_data, $description );
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Author URI:(.*)$|mi', $theme_data, $author_uri ) ) {
-            -
            		$author_uri = esc_url( trim( $author_uri[1] ) );
-            -
            	} else {
-            -
            		$author_uri = '';
-            -
            	}
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Template:(.*)$|mi', $theme_data, $template ) ) {
-            -
            		$template = wp_kses( trim( $template[1] ), $themes_allowed_tags );
-            -
            	} else {
-            -
            		$template = '';
-            -
            	}
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Version:(.*)|mi', $theme_data, $version ) ) {
-            -
            		$version = wp_kses( trim( $version[1] ), $themes_allowed_tags );
-            -
            	} else {
-            -
            		$version = '';
-            -
            	}
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Status:(.*)|mi', $theme_data, $status ) ) {
-            -
            		$status = wp_kses( trim( $status[1] ), $themes_allowed_tags );
-            -
            	} else {
-            -
            		$status = 'publish';
-            -
            	}
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Tags:(.*)|mi', $theme_data, $tags ) ) {
-            -
            		$tags = array_map( 'trim', explode( ',', wp_kses( trim( $tags[1] ), array() ) ) );
-            -
            	} else {
-            -
            		$tags = array();
-            -
            	}
-            -
-            -
            	$theme = ( isset( $theme_name[1] ) ) ? wp_kses( trim( $theme_name[1] ), $themes_allowed_tags ) : '';
-            -
-            -
            	$theme_uri = ( isset( $theme_uri[1] ) ) ? esc_url( trim( $theme_uri[1] ) ) : '';
-            -
-            -
            	$description = ( isset( $description[1] ) ) ? wp_kses( trim( $description[1] ), $themes_allowed_tags ) : '';
-            -
-            -
            	if ( preg_match( '|^[ \t\/*#@]*Author:(.*)$|mi', $theme_data, $author_name ) ) {
-            -
            		if ( empty( $author_uri ) ) {
-            -
            			$author = wp_kses( trim( $author_name[1] ), $themes_allowed_tags );
             		} else {
-            -
            			$author = sprintf( '<a href="%1$s" title="%2$s">%3$s</a>', $author_uri, __( 'Visit author homepage', 'theme-check' ), wp_kses( trim( $author_name[1] ), $themes_allowed_tags ) );
+            		}
-            -
            	} else {
-            -
            		$author = __( 'Anonymous', 'theme-check' );
+            	}
-            -
            	return array(
-            -
            		'Name'        => $theme,
-            -
            		'Title'       => $theme,
-            -
            		'URI'         => $theme_uri,
-            -
            		'Description' => $description,
-            -
            		'Author'      => $author,
-            -
            		'Author_URI'  => $author_uri,
-            -
            		'Version'     => $version,
-            -
            		'Template'    => $template,
-            -
            		'Status'      => $status,
-            -
            		'Tags'        => $tags,
             	);
+            }
-            -
            /*
-            -
             * 3.3/3.4 compat
+             *
              */
-            -
            function tc_get_themes() {
-            -
            	if ( ! class_exists( 'WP_Theme' ) ) {
-            -
            		return wp_get_theme();
+            	}
-            -
            	global $wp_themes;
-            -
            	if ( isset( $wp_themes ) ) {
-            -
            		return $wp_themes;
+            	}
-            -
            	$themes    = wp_get_themes();
-            -
            	$wp_themes = array();
-            -
-            -
            	foreach ( $themes as $theme ) {
-            -
            		$name = $theme->get( 'Name' );
-            -
            		if ( isset( $wp_themes[ $name ] ) ) {
-            -
            			$wp_themes[ $name . '/' . $theme->get_stylesheet() ] = $theme;
-            -
            		} else {
-            -
            			$wp_themes[ $name ] = $theme;
+            		}
+            	}
-            -
            	return $wp_themes;
-            -
            }
-            -
-            -
            function tc_get_theme_data( $theme_file ) {
-            -
            	if ( ! class_exists( 'WP_Theme' ) ) {
-            -
            		return wp_get_theme( $theme_file );
-            -
            	}
-            -
-            -
            	$theme = new WP_Theme( basename( dirname( $theme_file ) ), dirname( dirname( $theme_file ) ) );
-            -
-            -
            	$theme_data = array(
-            -
            		'Name'             => $theme->get( 'Name' ),
-            -
            		'URI'              => $theme->display( 'ThemeURI', true, false ),
-            -
            		'Description'      => $theme->display( 'Description', true, false ),
-            -
            		'Author'           => $theme->display( 'Author', true, false ),
-            -
            		'AuthorURI'        => $theme->display( 'AuthorURI', true, false ),
-            -
            		'Version'          => $theme->get( 'Version' ),
-            -
            		'Template'         => $theme->get( 'Template' ),
-            -
            		'Status'           => $theme->get( 'Status' ),
-            -
            		'Tags'             => $theme->get( 'Tags' ),
-            -
            		'Title'            => $theme->get( 'Name' ),
-            -
            		'AuthorName'       => $theme->display( 'Author', false, false ),
-            -
            		'License'          => $theme->display( 'License', false, false ),
-            -
            		'License URI'      => $theme->display( 'License URI', false, false ),
-            -
            		'Template Version' => $theme->display( 'Template Version', false, false ),
-            -
            	);
-            -
            	return $theme_data;
+            }


1	<?php
2	+ /**
3	+ * Runs checks against themes and displays the results
4	+ *
5	+ * Runs checks against themes and displays the results. Includes helper functions
6	+ * for performing checks.
7	+ *
8	+ * @package Theme Check
9	+ */
10	+
11	+ // main global to hold our checks.
12	global $themechecks;
13	$themechecks = array();
14
15	+ // counter for the checks.
16	global $checkcount;
17	$checkcount = 0;
18

27	}
28
29	// load all the checks in the checks directory.
30	+ foreach ( glob( __DIR__ . '/checks/*.php' ) as $file ) {

31	include $file;
32	}
33
34	do_action( 'themecheck_checks_loaded' );
35
36	+ /**
37	+ * Run Theme Check against a given theme.
38	+ *
39	+ * @param WP_Theme $theme A WP_Theme instance.
40	+ * @param string $theme_slug The slug of the given theme.
41	+ * @return bool
42	+ */
43	+ function run_themechecks_against_theme( $theme, $theme_slug ) {
44	+ $files = $theme->get_files(
45	+ null /* all file types */,
46	+ -1 /* infinite recursion */,
47	+ true /* include parent theme files */
48	+ );
49	+
50	+ foreach ( $files as $filename ) {
51	+ if ( substr( $filename, -4 ) === '.php' ) {
52	+ $php[ $filename ] = file_get_contents( $filename );
53	+ $php[ $filename ] = tc_strip_comments( $php[ $filename ] );
54	+ } elseif ( substr( $filename, -4 ) === '.css' ) {
55	+ $css[ $filename ] = file_get_contents( $filename );
56	+ } else {
57	+ // In local development it might be useful to skip other files
58	+ // (non .php or .css files) in dev directories.
59	+ if ( apply_filters( 'tc_skip_development_directories', false ) ) {
60	+ if ( tc_is_other_file_in_dev_directory( $filename ) ) {
61	+ continue;
62	+ }
63	+ }
64	+ $other[ $filename ] = file_get_contents( $filename );
65	+ }
66	+ }
67	+
68	+ // Run the checks.
69	+ return run_themechecks(
70	+ $php,
71	+ $css,
72	+ $other,
73	+ array(
74	+ 'theme' => $theme,
75	+ 'slug' => $theme_slug,
76	+ )
77	+ );
78	+ }
79	+
80	+ /**
81	+ * Run the Theme Checks against a set of files.
82	+ *
83	+ * @param array $php The PHP files.
84	+ * @param array $css The CSS files.
85	+ * @param array $other Any non-php/css files.
86	+ * @param array $context Any context for the Theme Checks.
87	+ *
88	+ * @return bool
89	+ */
90	+ function run_themechecks( $php, $css, $other, $context = array() ) {
91	global $themechecks;
92	+
93	$pass = true;
94	+
95	+ tc_adapt_checks_for_fse_themes( $php, $css, $other );
96	+
97	foreach ( $themechecks as $check ) {
98	if ( $check instanceof themecheck ) {
99	+ if ( $context && is_callable( array( $check, 'set_context' ) ) ) {
100	+ $check->set_context( $context );
101	+ }
102	+
103	$pass = $pass & $check->check( $php, $css, $other );
104	}
105	}
106	+
107	return $pass;
108	}
109

164	$error = str_replace( '"', "'", $error );
165	$this_line = str_replace( '"', "'", $this_line );
166	$error = ltrim( $error );
167	+ $pos = strpos( $this_line, $error );
168	$pre = ( false !== $pos ? substr( $this_line, 0, $pos ) : false );
169	$pre = ltrim( htmlspecialchars( $pre ) );
170	$bad_lines .= "<pre class='tc-grep'>" . __( 'Line ', 'theme-check' ) . ( $line_index + 1 ) . ': ' . $pre . htmlspecialchars( substr( stristr( $this_line, $error ), 0, 75 ) ) . '</pre>';

220	return $e;
221	}
222
223	+ // Strip comments from a PHP file in a way that will not change the underlying structure of the file.
224	+ function tc_strip_comments( $code ) {
225	+ $strip = array(
226	+ T_COMMENT => true,
227	+ T_DOC_COMMENT => true,





















228	);
229	+ $newlines = array(
230	+ "\n" => true,
231	+ "\r" => true,
232	+ );
233	+ $tokens = token_get_all( $code );
234	+ reset( $tokens );
235	+ $return = '';
236	+ $token = current( $tokens );
237	+ while ( $token ) {
238	+ if ( ! is_array( $token ) ) {
239	+ $return .= $token;
240	+ } elseif ( ! isset( $strip[ $token[0] ] ) ) {
241	+ $return .= $token[1];
































242	} else {
243	+ for ( $i = 0, $token_length = strlen( $token[1] ); $i < $token_length; ++$i ) {
244	+ if ( isset( $newlines[ $token[1][ $i ] ] ) ) {
245	+ $return .= $token[1][ $i ];
246	+ }
247	+ }
248	}
249	+ $token = next( $tokens );

250	}
251	+ return $return;
252	+ }
253
254	+ /**
255	+ * Used to allow some directories to be skipped during development.
256	+ *
257	+ * @param string $filename a filename/path.
258	+ * @return boolean
259	+ */
260	+ function tc_is_other_file_in_dev_directory( $filename ) {
261	+ $skip = false;
262	+ // Filterable List of dirs that you may want to skip other files in during
263	+ // development.
264	+ $dev_dirs = apply_filters(
265	+ 'tc_common_dev_directories',
266	+ array(
267	+ 'node_modules',
268	+ 'vendor',
269	+ )
270	);
271	+ foreach ( $dev_dirs as $dev_dir ) {
272	+ if ( strpos( $filename, $dev_dir ) ) {
273	+ $skip = true;
274	+ break;
275	+ }
276	+ }
277	+ return $skip;
278	}
279
280	+ /**
281	+ * Adapt the Theme Checks if the theme is an experiment Full-Site Editing theme.
282	*
283	+ * @param array $php_files The theme's PHP files.
284	+ * @param array $css_files The theme's CSS files.
285	+ * @param array $other_files Any other theme files.
286	+ *
287	+ * @return bool Whether the theme checks were adapted for FSE or not.
288	*/
289	+ function tc_adapt_checks_for_fse_themes( $php_files, $css_files, $other_files ) {
290	+ global $themechecks;
291
292	+ // Get a list of all non PHP and CSS file paths, relative to the theme root.
293	+ $other_filenames = array();
294	+ foreach ( $other_files as $path => $contents ) {
295	+ $other_filenames[] = tc_filename( $path );
296	}
297
298	+ // Check whether this is a FSE theme by searching for an index.html block template.
299	+ if ( ! in_array( 'block-templates/index.html', $other_filenames, true ) ) {
300	+ return false;
301	}
302
303	+ // Remove theme checks that do not apply to FSE themes.
304	+ foreach ( $themechecks as $key => $check ) {
305	+ if ( $check instanceof Tag_Check
306	+ \|\| $check instanceof Suggested_Styles_Check
307	+ \|\| $check instanceof Widgets_Check
308	+ \|\| $check instanceof Gravatar_Check
309	+ \|\| $check instanceof Post_Pagination_Check
310	+ \|\| $check instanceof Basic_Check
311	+ \|\| $check instanceof Comments_Check
312	+ \|\| $check instanceof Comment_Pagination_Check
313	+ \|\| $check instanceof Comment_Reply_Check
314	+ \|\| $check instanceof Nav_Menu_Check
315	+ \|\| $check instanceof Post_Thumbnail_Check
316	+ \|\| $check instanceof Theme_Support_Check
317	+ \|\| $check instanceof Editor_Style_Check
318	+ \|\| $check instanceof Underscores_Check
319	+ \|\| $check instanceof Constants_Check
320	+ \|\| $check instanceof Customizer_Check
321	+ \|\| $check instanceof Post_Format_Check
322	+ \|\| $check instanceof Search_Form_Check
323	+ \|\| $check instanceof Theme_Support_Title_Tag_Check
324	+ \|\| $check instanceof Screen_Reader_Text_Check
325	+ \|\| $check instanceof Include_Check
326	+ ) {
327	+ unset( $themechecks[ $key ] );
328	}
329	}
330
331	+ // Add FSE specific checks.
332	+ $themechecks[] = new FSE_Required_Files_Check();


333
334	+ return true;






















335	}

checks/admin_menu.php DELETED Viewed

@@ -1,73 +0,0 @@
-            -
            <?php
-            -
            class AdminMenu implements themecheck {
-            -
            	protected $error = array();
-            -
-            -
            	function check( $php_files, $css_files, $other_files) {
-            -
-            -
            		$ret = true;
-            -
-            -
-            -
            //check for levels deprecated in 2.0 in creating menus.
-            -
-            -
            		$checks = array(
-            -
            			'/([^_](add_(admin|submenu|menu|dashboard|posts|media|links|pages|comments|theme|plugins|users|management|options)_page)\s?\([^,]*,[^,]*,\s[\'|"]?(level_[0-9]|[0-9])[^;|\r|\r\n]*)/' => __( 'User levels were deprecated in <strong>2.0</strong>. Please see <a href="https://wordpress.org/support/article/roles-and-capabilities/">Roles_and_Capabilities</a>', 'theme-check' ),
-            -
            			'/[^a-z0-9](current_user_can\s?\(\s?[\'\"]level_[0-9][\'\"]\s?\))[^\r|\r\n]*/' => __( 'User levels were deprecated in <strong>2.0</strong>. Please see <a href="https://wordpress.org/support/article/roles-and-capabilities/">Roles_and_Capabilities</a>', 'theme-check' )
-            -
            			);
-            -
-            -
            		foreach ( $php_files as $php_key => $phpfile ) {
-            -
            			foreach ( $checks as $key => $check ) {
-            -
            				checkcount();
-            -
            				if ( preg_match( $key, $phpfile, $matches ) ) {
-            -
            					$filename = tc_filename( $php_key );
-            -
            					$grep = ( isset( $matches[2] ) ) ? tc_grep( $matches[2], $php_key ) : tc_grep( $matches[1], $php_key );
-            -
            					$this->error[] = sprintf('<span class="tc-lead tc-warning">'.__( 'WARNING', 'theme-check' ) . '</span>: <strong>%1$s</strong>. %2$s%3$s', $filename, $check, $grep );
-            -
            					$ret = false;
-            -
            				}
-            -
            			}
-            -
            		}
-            -
-            -
-            -
            // check for add_admin_page's, except for add_theme_page
-            -
            // Note to TGMPA: Stop trying to bypass theme check.
-            -
-            -
            		$checks = array(
-            -
            			'/(?<!function)[^_>:](add_[^_\'",();]+?_page)/' => _x(
-            -
            					'Themes must not use <strong>%s()</strong>.',
-            -
            					'function name',
-            -
            					'theme-check'
-            -
            				)
-            -
            			);
-            -
-            -
-            -
            		foreach ( $php_files as $php_key => $phpfile ) {
-            -
            			foreach ( $checks as $key => $check ) {
-            -
            				checkcount();
-            -
            				if ( preg_match_all( $key, $phpfile, $matches ) ) {
-            -
            					foreach ($matches[1] as $match) {
-            -
            						if ( in_array( $match, array( 'add_theme_page', 'add_menu_page', 'add_submenu_page' ), true ) ) {
-            -
            							continue;
-            -
            						}
-            -
            						$filename = tc_filename( $php_key );
-            -
            						$error = ltrim( rtrim( $match, '(' ) );
-            -
            						$grep = tc_grep( $error, $php_key );
-            -
            						$notallowed = sprintf( $check, $match );
-            -
-            -
            						$this->error[] = sprintf(
-            -
            							'<span class="tc-lead tc-required">'.__( 'REQUIRED', 'theme-check' ) .'</span>: <strong>%1$s</strong>. %2$s%3$s%',
-            -
            							$filename,
-            -
            							$notallowed,
-            -
            							$grep
-            -
            						);
-            -
            						$ret = false;
-            -
            					}
-            -
            				}
-            -
            			}
-            -
            		}
-            -
-            -
            		return $ret;
-            -
            	}
-            -
-            -
            	function getError() { return $this->error; }
-            -
            }
-            -
-            -
            $themechecks[] = new AdminMenu;

checks/adminbar.php DELETED Viewed

@@ -1,55 +0,0 @@
-            -
            <?php
-            -
            /**
-            -
             * This checks if the admin bar gets hidden by the theme.
-            -
             **/
-            -
            class NoHiddenAdminBar implements themecheck {
-            -
            	protected $error = array();
-            -
-            -
            	function check( $php_files, $css_files, $other_files ) {
-            -
            		$ret      = true;
-            -
-            -
            		$php_regex = "/(add_filter(\s*)\((\s*)(\"|')show_admin_bar(\"|')(\s*)(.*))|(([^\S])show_admin_bar(\s*)\((.*))/";
-            -
            		$css_regex = "/(#wpadminbar)/";
-            -
-            -
            		checkcount();
-            -
            		// Check php files for filter show_admin_bar, show_admin_bar_front, and show_admin_bar().
-            -
            		foreach ( $php_files as $file_path => $file_content ) {
-            -
-            -
            			$filename = tc_filename( $file_path );
-            -
-            -
            			if ( preg_match( $php_regex, $file_content, $matches ) ) {
-            -
-            -
            				$error = '/show_admin_bar/';
-            -
            				$grep  = tc_preg( $error, $file_path );
-            -
-            -
            				$this->error[] = sprintf( '<span class="tc-lead tc-warning">' . __( 'WARNING', 'theme-check' ) . '</span>: ' . __( '%1$s Themes are not allowed to hide the admin bar. This warning must be manually checked.', 'theme-check' ),
-            -
            				'<strong>' . $filename . '</strong>' ) . $grep;
-            -
            			}
-            -
            		}
-            -
-            -
            		checkcount();
-            -
            		// Check CSS Files for #wpadminbar.
-            -
            		foreach ( $css_files as $file_path => $file_content ) {
-            -
-            -
            			$filename = tc_filename( $file_path );
-            -
            			$error    = '/#wpadminbar/';
-            -
            			// Don't print minified files.
-            -
            			if ( strpos( $filename, '.min.' ) === false ) {
-            -
            				$grep = tc_preg( $error, $file_path );
-            -
            			} else {
-            -
            				$grep = '';
-            -
            			}
-            -
-            -
            			if ( preg_match( $css_regex, $file_content, $matches ) ) {
-            -
            				$this->error[] = sprintf( '<span class="tc-lead tc-warning">' . __( 'WARNING', 'theme-check' ) . '</span>: ' . __( 'The theme is using `#wpadminbar` in %1$s. Hiding the admin bar is not allowed. This warning must be manually checked.', 'theme-check' ),
-            -
            				'<strong>' . $filename . '</strong>' ) . $grep;
-            -
            			}
-            -
            		}
-            -
-            -
            		return $ret;
-            -
            	}
-            -
-            -
            	function getError() { return $this->error; }
-            -
            }
-            -
-            -
            $themechecks[] = new NoHiddenAdminBar();

checks/badthings.php DELETED Viewed

@@ -1,60 +0,0 @@
-            -
            <?php
-            -
            class Bad_Checks implements themecheck {
-            -
            	protected $error = array();
-            -
-            -
            	function check( $php_files, $css_files, $other_files ) {
-            -
            		$ret = true;
-            -
-            -
            		$checks = array(
-            -
            			'/(?<![_|a-z0-9|\.])eval\s?\(/i' => __( 'eval() is not allowed.', 'theme-check' ),
-            -
            			'/[^a-z0-9](?<!_)(popen|proc_open|[^_]exec|shell_exec|system|passthru)\(/' => __( 'PHP system calls are often disabled by server admins and should not be in themes', 'theme-check' ),
-            -
            			'/\s?ini_set\(/' => __( 'Themes should not change server PHP settings', 'theme-check' ),
-            -
            			'/base64_decode/' => __( 'base64_decode() is not allowed', 'theme-check' ),
-            -
            			'/base64_encode/' => __( 'base64_encode() is not allowed', 'theme-check' ),
-            -
            			'/uudecode/ims' => __( 'uudecode() is not allowed', 'theme-check' ),
-            -
            			'/str_rot13/ims' => __( 'str_rot13() is not allowed', 'theme-check' ),
-            -
            			'/cx=[0-9]{21}:[a-z0-9]{10}/' => __( 'Google search code detected', 'theme-check' ),
-            -
            			'/pub-[0-9]{16}/i' => __( 'Google advertising code detected', 'theme-check' ),
-            -
            			'/sharesale/i' => __( 'Sharesale affiliate link detected', 'theme-check' ),
-            -
            			'/affiliate_id/i' => __( 'Potential affiliate link detected', 'theme-check' ),
-            -
            			'/(elementor_partner_id)|(wpbeaverbuilder.*?fla)/i' => __( 'Potential affiliate link detected', 'theme-check' ),
-            -
            			);
-            -
-            -
            		$grep = '';
-            -
-            -
            		foreach ( $php_files as $php_key => $phpfile ) {
-            -
            			foreach ( $checks as $key => $check ) {
-            -
            			checkcount();
-            -
            				if ( preg_match( $key, $phpfile, $matches ) ) {
-            -
            					$filename = tc_filename( $php_key );
-            -
            					$error = ltrim( trim( $matches[0], '(' ) );
-            -
            					$grep = tc_grep( $error, $php_key );
-            -
            					$this->error[] = sprintf('<span class="tc-lead tc-required">'. __( 'REQUIRED', 'theme-check' ) . '</span>: ' . __( 'Found %1$s in the file %2$s. %3$s. %4$s', 'theme-check' ), '<strong>' . $error . '</strong>', '<strong>' . $filename . '</strong>', $check, $grep );
-            -
            					$ret = false;
-            -
            				}
-            -
            			}
-            -
            		}
-            -
-            -
-            -
            		$checks = array(
-            -
            			'/cx=[0-9]{21}:[a-z0-9]{10}/' => __( 'Google search code detected', 'theme-check' ),
-            -
            			'/pub-[0-9]{16}/' => __( 'Google advertising code detected', 'theme-check' )
-            -
            			);
-            -
-            -
            		foreach ( $other_files as $php_key => $phpfile ) {
-            -
            			foreach ( $checks as $key => $check ) {
-            -
            				checkcount();
-            -
            				if ( preg_match( $key, $phpfile, $matches ) ) {
-            -
            					$filename = tc_filename( $php_key );
-            -
            					$error = ltrim( rtrim( $matches[0],'(' ) );
-            -
            					$grep = tc_grep( $error, $php_key );
-            -
            					$this->error[] = sprintf(__('<span class="tc-lead tc-required">REQUIRED</span>: Found <strong>%1$s</strong> in the file <strong>%2$s</strong>. %3$s.%4$s', 'theme-check'), $error, $filename, $check, $grep);
-            -
            					$ret = false;
-            -
            				}
-            -
            			}
-            -
            		}
-            -
            		return $ret;
-            -
            	}
-            -
            	function getError() { return $this->error; }
-            -
            }
-            -
            $themechecks[] = new Bad_Checks;

checks/basic.php DELETED Viewed

@@ -1,47 +0,0 @@
-            -
            <?php
-            -
-            -
            // do some basic checks for strings
-            -
            class Basic_Checks implements themecheck {
-            -
            	protected $error = array();
-            -
-            -
            	function check( $php_files, $css_files, $other_files) {
-            -
-            -
            		$php = implode( ' ', $php_files );
-            -
            		$grep = '';
-            -
            		$ret = true;
-            -
-            -
            		$checks = array(
-            -
            			'DOCTYPE' => __( 'See: <a href="https://codex.wordpress.org/HTML_to_XHTML">https://codex.wordpress.org/HTML_to_XHTML</a><pre>&lt;!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"<br />"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"?&gt;</pre>', 'theme-check' ),
-            -
            			'(wp_body_open\s*\()|(do_action\s*\(\s*["\']wp_body_open)' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_body_open/">wp_body_open</a><pre> &lt;?php wp_body_open(); ?&gt;</pre>', 'theme-check' ),
-            -
            			'wp_footer\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_footer/">wp_footer</a><pre> &lt;?php wp_footer(); ?&gt;</pre>', 'theme-check' ),
-            -
            			'wp_head\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_head/">wp_head</a><pre> &lt;?php wp_head(); ?&gt;</pre>', 'theme-check' ),
-            -
            			'language_attributes' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/language_attributes/">language_attributes</a><pre>&lt;html &lt;?php language_attributes(); ?&gt;</pre>', 'theme-check' ),
-            -
            			'charset' => __( 'There must be a charset defined in the Content-Type or the meta charset tag in the head.', 'theme-check' ),
-            -
            			'add_theme_support\s*\(\s?("|\')automatic-feed-links("|\')\s?\)' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/add_theme_support/">add_theme_support</a><pre> &lt;?php add_theme_support( $feature ); ?&gt;</pre>', 'theme-check' ),
-            -
            			'comments_template\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/comments_template/">comments_template</a><pre> &lt;?php comments_template( $file, $separate_comments ); ?&gt;</pre>', 'theme-check' ),
-            -
            			'wp_list_comments\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_list_comments/">wp_list_comments</a><pre> &lt;?php wp_list_comments( $args ); ?&gt;</pre>', 'theme-check' ),
-            -
            			'comment_form\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/comment_form/">comment_form</a><pre> &lt;?php comment_form(); ?&gt;</pre>', 'theme-check' ),
-            -
            			'body_class\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/body_class/">body_class</a><pre> &lt;?php body_class( $class ); ?&gt;</pre>', 'theme-check' ),
-            -
            			'wp_link_pages\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_link_pages/">wp_link_pages</a><pre> &lt;?php wp_link_pages( $args ); ?&gt;</pre>', 'theme-check' ),
-            -
            			'post_class\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/post_class/">post_class</a><pre> &lt;div id="post-&lt;?php the_ID(); ?&gt;" &lt;?php post_class(); ?&gt;&gt;</pre>', 'theme-check' )
-            -
            			);
-            -
-            -
            		foreach ($checks as $key => $check) {
-            -
            			checkcount();
-            -
            			if ( !preg_match( '/' . $key . '/i', $php ) ) {
-            -
            				if ( $key === 'add_theme_support\s*\(\s?("|\')automatic-feed-links("|\')\s?\)' ) $key = __( 'add_theme_support( \'automatic-feed-links\' )', 'theme-check');
-            -
            				if ( $key === 'body_class\s*\(' ) $key = __( 'body_class call in body tag', 'theme-check');
-            -
            				if ( $key === '(wp_body_open\s*\()|(do_action\s*\(\s*["\']wp_body_open)' ) $key = __( 'wp_body_open action or function call at the very top of the body just after the opening body tag', 'theme-check');
-            -
            				$key = str_replace( '\s*\(', '', $key );
-            -
            				$this->error[] = sprintf( '<span class="tc-lead tc-required">'.__('REQUIRED','theme-check').'</span>: '.__('Could not find %1$s. %2$s', 'theme-check' ), '<strong>' . $key . '</strong>', $check );
-            -
            				$ret = false;
-            -
            			}
-            -
            		}
-            -
-            -
            		return $ret;
-            -
            	}
-            -
-            -
            	function getError() { return $this->error; }
-            -
            }
-            -
-            -
            $themechecks[] = new Basic_Checks;

checks/cdn.php DELETED Viewed

@@ -1,45 +0,0 @@
-            -
            <?php
-            -
            /**
-            -
             * Checks for resources being loaded from CDNs.
-            -
             */
-            -
-            -
            class CDNCheck implements themecheck {
-            -
            	protected $error = array();
-            -
-            -
            	function check( $php_files, $css_files, $other_files) {
-            -
-            -
            		$ret = true;
-            -
            		$php_code = implode( ' ', $php_files );
-            -
            		$css_code = implode( ' ', $css_files );
-            -
            		$all_code = $php_code . ' ' . $css_code;
-            -
-            -
            		checkcount();
-            -
-            -
            		$cdn_list = array(
-            -
            			'bootstrap-maxcdn'      => 'maxcdn.bootstrapcdn.com',
-            -
            			'bootstrap-netdna'      => 'netdna.bootstrapcdn.com',
-            -
            			'bootstrap-stackpath'   => 'stackpath.bootstrapcdn.com',
-            -
            			'fontawesome'           => 'kit.fontawesome.com',
-            -
            			'googlecode'            => 'googlecode.com/svn/',
-            -
            			'oss.maxcdn'            => 'oss.maxcdn.com',
-            -
            			'jquery'                => 'code.jquery.com/jquery-',
-            -
            			'aspnetcdn'             => 'aspnetcdn.com',
-            -
            			'cloudflare'            => 'cloudflare.com',
-            -
            			'keycdn'                => 'keycdn.com',
-            -
            			'pxgcdn'                => 'pxgcdn.com',
-            -
            			'vimeocdn'              => 'vimeocdn.com',  //usually in JS files
-            -
            		);
-            -
-            -
            		foreach( $cdn_list as $cdn_slug => $cdn_url ) {
-            -
            			if ( false !== strpos( $all_code, $cdn_url ) ) {
-            -
            				$this->error[] = '<span class="tc-lead tc-required">' . __( 'REQUIRED','theme-check' ) . '</span>: ' . sprintf( __( 'Found the URL of a CDN in the code: %s. You should not load CSS or Javascript resources from a CDN, please bundle them with the theme.', 'theme-check' ), '<code>' . esc_html( $cdn_url ) . '</code>' );
-            -
            				$ret = false;
-            -
            			}
-            -
            		}
-            -
-            -
            		return $ret;
-            -
            	}
-            -
-            -
            	function getError() { return $this->error; }
-            -
            }
-            -
            $themechecks[] = new CDNCheck;

checks/class-admin-menu-check.php ADDED Viewed

	@@ -0,0 +1,107 @@


1	+ <?php
2	+ /**
3	+ * Check for creation of admin menus
4	+ *
5	+ * Checks that user levels are not used when creating admin menus.
6	+ * Checks that only add_theme_page, add_menu_page and add_submenu_page are used to create admin menus.
7	+ *
8	+ * @package Theme Check
9	+ */
10	+
11	+ /**
12	+ * Check for creation of admin menus.
13	+ *
14	+ * Checks that user levels are not used when creating admin menus.
15	+ * Checks that only add_theme_page, add_menu_page and add_submenu_page are used to create admin menus.
16	+ */
17	+ class Admin_Menu_Check implements themecheck {
18	+ /**
19	+ * Error messages, warnings and info notices.
20	+ *
21	+ * @var array $error
22	+ */
23	+ protected $error = array();
24	+
25	+ /**
26	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
27	+ *
28	+ * @param array $php_files File paths and content for PHP files.
29	+ * @param array $css_files File paths and content for CSS files.
30	+ * @param array $other_files Folder names, file paths and content for other files.
31	+ */
32	+ public function check( $php_files, $css_files, $other_files ) {
33	+
34	+ $ret = true;
35	+
36	+ // Check for levels deprecated in 2.0 in creating menus.
37	+ $checks = array(
38	+ '/([^_](add_(admin\|submenu\|menu\|dashboard\|posts\|media\|links\|pages\|comments\|theme\|plugins\|users\|management\|options)_page)\s?\([^,],[^,],\s[\'\|"]?(level_[0-9]\|[0-9])[^;\|\r\|\r\n]*)/' => __( 'User levels were deprecated in <strong>2.0</strong>. Please see <a href="https://wordpress.org/support/article/roles-and-capabilities/">Roles and Capabilities</a>', 'theme-check' ),
39	+ '/[^a-z0-9](current_user_can\s?$\s?[\'\"]level_[0-9][\'\"]\s?$)[^\r\|\r\n]*/' => __( 'User levels were deprecated in <strong>2.0</strong>. Please see <a href="https://wordpress.org/support/article/roles-and-capabilities/">Roles and Capabilities</a>', 'theme-check' ),
40	+ );
41	+
42	+ foreach ( $php_files as $php_key => $phpfile ) {
43	+ foreach ( $checks as $key => $check ) {
44	+ checkcount();
45	+ if ( preg_match( $key, $phpfile, $matches ) ) {
46	+ $filename = tc_filename( $php_key );
47	+ $grep = tc_grep( isset( $matches[2] ) ? $matches[2] : $matches[1], $php_key );
48	+ $this->error[] = sprintf(
49	+ '<span class="tc-lead tc-warning">%s</span>: <strong>%s</strong>. %s %s',
50	+ __( 'WARNING', 'theme-check' ),
51	+ $filename,
52	+ $check,
53	+ $grep
54	+ );
55	+ }
56	+ }
57	+ }
58	+
59	+ // Check for add_admin_page's, except for add_theme_page.
60	+ // Note to TGMPA: Stop trying to bypass theme check.
61	+ $checks = array(
62	+ '/(?<!function)[^_>:](add_[a-z]+_page)/' => _x(
63	+ 'Themes should not use <strong>%s()</strong>.',
64	+ 'function name',
65	+ 'theme-check'
66	+ ),
67	+ );
68	+
69	+ foreach ( $php_files as $php_key => $phpfile ) {
70	+ foreach ( $checks as $key => $check ) {
71	+ checkcount();
72	+ if ( preg_match_all( $key, $phpfile, $matches ) ) {
73	+ foreach ( $matches[1] as $match ) {
74	+ if ( in_array( $match, array( 'add_theme_page', 'add_menu_page', 'add_submenu_page' ), true ) ) {
75	+ continue;
76	+ }
77	+ $filename = tc_filename( $php_key );
78	+ $error = ltrim( rtrim( $match, '(' ) );
79	+ $grep = tc_grep( $error, $php_key );
80	+ $notallowed = sprintf( $check, $match );
81	+
82	+ $this->error[] = sprintf(
83	+ '<span class="tc-lead tc-recommended">%s</span>: <strong>%s</strong>. %s %s',
84	+ __( 'RECOMMENDED', 'theme-check' ),
85	+ $filename,
86	+ $notallowed,
87	+ $grep
88	+ );
89	+ }
90	+ }
91	+ }
92	+ }
93	+
94	+ return true;
95	+ }
96	+
97	+ /**
98	+ * Get error messages from the checks.
99	+ *
100	+ * @return array Error message.
101	+ */
102	+ public function getError() {
103	+ return $this->error;
104	+ }
105	+ }
106	+
107	+ $themechecks[] = new Admin_Menu_Check();

checks/class-bad-things-check.php ADDED Viewed

	@@ -0,0 +1,114 @@


1	+ <?php
2	+ /**
3	+ * Check for code that is not allowed
4	+ *
5	+ * Checks for code that is not allowed, server settings, and affiliate links.
6	+ *
7	+ * @package Theme Check
8	+ */
9	+
10	+ /**
11	+ * Check for code that is not allowed.
12	+ *
13	+ * Checks for code that is not allowed, server settings, and affiliate links.
14	+ */
15	+ class Bad_Things_Check implements themecheck {
16	+ /**
17	+ * Error messages, warnings and info notices.
18	+ *
19	+ * @var array $error
20	+ */
21	+ protected $error = array();
22	+
23	+ /**
24	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
25	+ *
26	+ * @param array $php_files File paths and content for PHP files.
27	+ * @param array $css_files File paths and content for CSS files.
28	+ * @param array $other_files Folder names, file paths and content for other files.
29	+ */
30	+ public function check( $php_files, $css_files, $other_files ) {
31	+ $ret = true;
32	+
33	+ $checks = array(
34	+ '/(?<![_\|a-z0-9\|\.])eval\s?\(/i' => __( 'eval() is not allowed.', 'theme-check' ),
35	+ '/[^a-z0-9](?<!_)(popen\|proc_open\|[^_]exec\|shell_exec\|system\|passthru)\(/' => __( 'PHP system calls are often disabled by server admins and should not be in themes', 'theme-check' ),
36	+ '/\s?ini_set\(/' => __( 'Themes should not change server PHP settings', 'theme-check' ),
37	+ '/base64_decode/' => __( 'base64_decode() is not allowed', 'theme-check' ),
38	+ '/base64_encode/' => __( 'base64_encode() is not allowed', 'theme-check' ),
39	+ '/uudecode/ims' => __( 'uudecode() is not allowed', 'theme-check' ),
40	+ '/str_rot13/ims' => __( 'str_rot13() is not allowed', 'theme-check' ),
41	+ '/cx=[0-9]{21}:[a-z0-9]{10}/' => __( 'Google search code detected', 'theme-check' ),
42	+ '/pub-[0-9]{16}/i' => __( 'Google advertising code detected', 'theme-check' ),
43	+ '/sharesale/i' => __( 'Sharesale affiliate link detected', 'theme-check' ),
44	+ '/affiliate_id/i' => __( 'Potential affiliate link detected', 'theme-check' ),
45	+ '/(elementor_partner_id)\|(wpbeaverbuilder.*?fla)/i' => __( 'Potential affiliate link detected', 'theme-check' ),
46	+ );
47	+
48	+ $grep = '';
49	+
50	+ foreach ( $php_files as $php_key => $phpfile ) {
51	+ foreach ( $checks as $key => $check ) {
52	+ checkcount();
53	+ if ( preg_match( $key, $phpfile, $matches ) ) {
54	+ $filename = tc_filename( $php_key );
55	+ $error = ltrim( trim( $matches[0], '(' ) );
56	+ $grep = tc_grep( $error, $php_key );
57	+ $this->error[] = sprintf(
58	+ '<span class="tc-lead tc-required">%s</span>: %s %s %s',
59	+ __( 'REQUIRED', 'theme-check' ),
60	+ sprintf(
61	+ __( 'Found %1$s in the file %2$s.', 'theme-check' ),
62	+ '<strong>' . $error . '</strong>',
63	+ '<strong>' . $filename . '</strong>'
64	+ ),
65	+ $check,
66	+ $grep
67	+ );
68	+ $ret = false;
69	+ }
70	+ }
71	+ }
72	+
73	+ $checks = array(
74	+ '/cx=[0-9]{21}:[a-z0-9]{10}/' => __( 'Google search code detected', 'theme-check' ),
75	+ '/pub-[0-9]{16}/i' => __( 'Google advertising code detected', 'theme-check' ),
76	+ );
77	+
78	+ foreach ( $other_files as $php_key => $phpfile ) {
79	+ foreach ( $checks as $key => $check ) {
80	+ checkcount();
81	+ if ( preg_match( $key, $phpfile, $matches ) ) {
82	+ $filename = tc_filename( $php_key );
83	+ $error = ltrim( rtrim( $matches[0], '(' ) );
84	+ $grep = tc_grep( $error, $php_key );
85	+ $this->error[] = sprintf(
86	+ '<span class="tc-lead tc-required">%s</span>: %s %s %s',
87	+ __( 'REQUIRED', 'theme-check' ),
88	+ sprintf(
89	+ __( 'Found <strong>%1$s</strong> in the file <strong>%2$s</strong>.', 'theme-check' ),
90	+ $error,
91	+ $filename
92	+ ),
93	+ $check,
94	+ $grep
95	+ );
96	+ $ret = false;
97	+ }
98	+ }
99	+ }
100	+
101	+ return $ret;
102	+ }
103	+
104	+ /**
105	+ * Get error messages from the checks.
106	+ *
107	+ * @return array Error message.
108	+ */
109	+ public function getError() {
110	+ return $this->error;
111	+ }
112	+ }
113	+
114	+ $themechecks[] = new Bad_Things_Check();

checks/class-basic-check.php ADDED Viewed

	@@ -0,0 +1,84 @@


1	+ <?php
2	+ /**
3	+ * Check for basic functions needed for classic themes to work correctly
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Check for basic functions needed for classic themes to work correctly.
10	+ */
11	+ class Basic_Check implements themecheck {
12	+ /**
13	+ * Error messages, warnings and info notices.
14	+ *
15	+ * @var array $error
16	+ */
17	+ protected $error = array();
18	+
19	+ /**
20	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
21	+ *
22	+ * @param array $php_files File paths and content for PHP files.
23	+ * @param array $css_files File paths and content for CSS files.
24	+ * @param array $other_files Folder names, file paths and content for other files.
25	+ */
26	+ public function check( $php_files, $css_files, $other_files ) {
27	+
28	+ $php = implode( ' ', $php_files );
29	+ $grep = '';
30	+ $ret = true;
31	+
32	+ $checks = array(
33	+ 'DOCTYPE' => __( 'See: <a href="https://codex.wordpress.org/HTML_to_XHTML">https://codex.wordpress.org/HTML_to_XHTML</a><pre><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"<br />"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"?></pre>', 'theme-check' ),
34	+ '(wp_body_open\s\()\|(do_action\s\(\s*["\']wp_body_open)' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_body_open/">wp_body_open</a><pre> <?php wp_body_open(); ?></pre>', 'theme-check' ),
35	+ 'wp_footer\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_footer/">wp_footer</a><pre> <?php wp_footer(); ?></pre>', 'theme-check' ),
36	+ 'wp_head\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_head/">wp_head</a><pre> <?php wp_head(); ?></pre>', 'theme-check' ),
37	+ 'language_attributes' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/language_attributes/">language_attributes</a><pre><html <?php language_attributes(); ?></pre>', 'theme-check' ),
38	+ 'charset' => __( 'There must be a charset defined in the Content-Type or the meta charset tag in the head.', 'theme-check' ),
39	+ 'add_theme_support\s*$\s?("\|\')automatic-feed-links("\|\')\s?$' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/add_theme_support/">add_theme_support</a><pre> <?php add_theme_support( $feature ); ?></pre>', 'theme-check' ),
40	+ 'body_class\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/body_class/">body_class</a><pre> <?php body_class( $class ); ?></pre>', 'theme-check' ),
41	+ 'wp_link_pages\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_link_pages/">wp_link_pages</a><pre> <?php wp_link_pages( $args ); ?></pre>', 'theme-check' ),
42	+ 'post_class\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/post_class/">post_class</a><pre> <div id="post-<?php the_ID(); ?>" <?php post_class(); ?>></pre>', 'theme-check' ),
43	+ );
44	+
45	+ foreach ( $checks as $key => $check ) {
46	+ checkcount();
47	+ if ( ! preg_match( '/' . $key . '/i', $php ) ) {
48	+ if ( $key === 'add_theme_support\s*$\s?("\|\')automatic-feed-links("\|\')\s?$' ) {
49	+ $key = __( 'add_theme_support( \'automatic-feed-links\' )', 'theme-check' );
50	+ }
51	+ if ( $key === 'body_class\s*\(' ) {
52	+ $key = __( 'body_class call in body tag', 'theme-check' );
53	+ }
54	+ if ( $key === '(wp_body_open\s\()\|(do_action\s\(\s*["\']wp_body_open)' ) {
55	+ $key = __( 'wp_body_open action or function call at the very top of the body just after the opening body tag', 'theme-check' );
56	+ }
57	+ $key = str_replace( '\s*\(', '', $key );
58	+ $this->error[] = sprintf(
59	+ '<span class="tc-lead tc-required">%s</span>: %s',
60	+ __( 'REQUIRED', 'theme-check' ),
61	+ sprintf(
62	+ __( 'Could not find %1$s. %2$s', 'theme-check' ),
63	+ '<strong>' . $key . '</strong>',
64	+ $check
65	+ )
66	+ );
67	+ $ret = false;
68	+ }
69	+ }
70	+
71	+ return $ret;
72	+ }
73	+
74	+ /**
75	+ * Get error messages from the checks.
76	+ *
77	+ * @return array Error message.
78	+ */
79	+ public function getError() {
80	+ return $this->error;
81	+ }
82	+ }
83	+
84	+ $themechecks[] = new Basic_Check();

checks/class-block-patterns-check.php ADDED Viewed

	@@ -0,0 +1,62 @@


1	+ <?php
2	+ /**
3	+ * Check if block patterns and block styles are included
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Check if block patterns and block styles are included.
10	+ *
11	+ * Check if block patterns and block styles are included, if not, recommend it.
12	+ */
13	+ class Block_Patterns_Check implements themecheck {
14	+ /**
15	+ * Error messages, warnings and info notices.
16	+ *
17	+ * @var array $error
18	+ */
19	+ protected $error = array();
20	+
21	+ /**
22	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
23	+ *
24	+ * @param array $php_files File paths and content for PHP files.
25	+ * @param array $css_files File paths and content for CSS files.
26	+ * @param array $other_files Folder names, file paths and content for other files.
27	+ */
28	+ public function check( $php_files, $css_files, $other_files ) {
29	+ checkcount();
30	+
31	+ $php = implode( ' ', $php_files );
32	+
33	+ if ( strpos( $php, 'register_block_pattern' ) === false ) {
34	+ $this->error[] = sprintf(
35	+ '<span class="tc-lead tc-recommended">%s</span>: %s',
36	+ __( 'RECOMMENDED', 'theme-check' ),
37	+ __( 'No reference to <strong>register_block_pattern</strong> was found in the theme. Theme authors are encouraged to implement custom block patterns as a transition to block themes.', 'theme-check' )
38	+ );
39	+ }
40	+
41	+ if ( strpos( $php, 'register_block_style' ) === false ) {
42	+ $this->error[] = sprintf(
43	+ '<span class="tc-lead tc-recommended">%s</span>: %s',
44	+ __( 'RECOMMENDED', 'theme-check' ),
45	+ __( 'No reference to <strong>register_block_style</strong> was found in the theme. Theme authors are encouraged to implement new block styles as a transition to block themes.', 'theme-check' )
46	+ );
47	+ }
48	+
49	+ return true;
50	+ }
51	+
52	+ /**
53	+ * Get error messages from the checks.
54	+ *
55	+ * @return array Error message.
56	+ */
57	+ public function getError() {
58	+ return $this->error;
59	+ }
60	+ }
61	+
62	+ $themechecks[] = new Block_Patterns_Check();

checks/class-cdn-check.php ADDED Viewed

	@@ -0,0 +1,79 @@


1	+ <?php
2	+ /**
3	+ * Checks for resources being loaded from CDNs.
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Checks for resources being loaded from CDNs.
10	+ *
11	+ * Checks for resources being loaded from CDNs. Usage of CDN is required to be removed.
12	+ */
13	+ class CDN_Check implements themecheck {
14	+ /**
15	+ * Error messages, warnings and info notices.
16	+ *
17	+ * @var array $error
18	+ */
19	+ protected $error = array();
20	+
21	+ /**
22	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
23	+ *
24	+ * @param array $php_files File paths and content for PHP files.
25	+ * @param array $css_files File paths and content for CSS files.
26	+ * @param array $other_files Folder names, file paths and content for other files.
27	+ */
28	+ public function check( $php_files, $css_files, $other_files ) {
29	+
30	+ $ret = true;
31	+ $php_code = implode( ' ', $php_files );
32	+ $css_code = implode( ' ', $css_files );
33	+ $all_code = $php_code . ' ' . $css_code;
34	+
35	+ checkcount();
36	+
37	+ $cdn_list = array(
38	+ 'bootstrap-maxcdn' => 'maxcdn.bootstrapcdn.com',
39	+ 'bootstrap-netdna' => 'netdna.bootstrapcdn.com',
40	+ 'bootstrap-stackpath' => 'stackpath.bootstrapcdn.com',
41	+ 'fontawesome' => 'kit.fontawesome.com',
42	+ 'googlecode' => 'googlecode.com/svn/',
43	+ 'oss.maxcdn' => 'oss.maxcdn.com',
44	+ 'jquery' => 'code.jquery.com/jquery-',
45	+ 'aspnetcdn' => 'aspnetcdn.com',
46	+ 'cloudflare' => 'cloudflare.com',
47	+ 'keycdn' => 'keycdn.com',
48	+ 'pxgcdn' => 'pxgcdn.com',
49	+ 'vimeocdn' => 'vimeocdn.com', // Usually in JS files.
50	+ );
51	+
52	+ foreach ( $cdn_list as $cdn_slug => $cdn_url ) {
53	+ if ( false !== strpos( $all_code, $cdn_url ) ) {
54	+ $this->error[] = sprintf(
55	+ '<span class="tc-lead tc-required">%s</span>: %s',
56	+ __( 'REQUIRED', 'theme-check' ),
57	+ sprintf(
58	+ __( 'Found the URL of a CDN in the code: %s. You should not load CSS or Javascript resources from a CDN, please bundle them with the theme.', 'theme-check' ),
59	+ '<code>' . esc_html( $cdn_url ) . '</code>'
60	+ )
61	+ );
62	+ $ret = false;
63	+ }
64	+ }
65	+
66	+ return $ret;
67	+ }
68	+
69	+ /**
70	+ * Get error messages from the checks.
71	+ *
72	+ * @return array Error message.
73	+ */
74	+ public function getError() {
75	+ return $this->error;
76	+ }
77	+ }
78	+
79	+ $themechecks[] = new CDN_Check();

checks/class-comment-pagination-check.php ADDED Viewed

	@@ -0,0 +1,62 @@


1	+ <?php
2	+ /**
3	+ * Checks if comment pagination is included
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Checks if comment pagination is included.
10	+ *
11	+ * Checks if comment pagination is included. If not, recommend it.
12	+ */
13	+ class Comment_Pagination_Check implements themecheck {
14	+ /**
15	+ * Error messages, warnings and info notices.
16	+ *
17	+ * @var array $error
18	+ */
19	+ protected $error = array();
20	+
21	+ /**
22	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
23	+ *
24	+ * @param array $php_files File paths and content for PHP files.
25	+ * @param array $css_files File paths and content for CSS files.
26	+ * @param array $other_files Folder names, file paths and content for other files.
27	+ */
28	+ public function check( $php_files, $css_files, $other_files ) {
29	+
30	+ // Combine all the php files into one string to make it easier to search.
31	+ $php = implode( ' ', $php_files );
32	+
33	+ checkcount();
34	+
35	+ if (
36	+ strpos( $php, 'paginate_comments_links' ) === false &&
37	+ strpos( $php, 'the_comments_navigation' ) === false &&
38	+ strpos( $php, 'the_comments_pagination' ) === false &&
39	+ strpos( $php, 'next_comments_link' ) === false &&
40	+ strpos( $php, 'previous_comments_link' ) === false
41	+ ) {
42	+ $this->error[] = sprintf(
43	+ '<span class="tc-lead tc-recommended">%s</span>: %s',
44	+ __( 'RECOMMENDED', 'theme-check' ),
45	+ __( "The theme doesn't have comment pagination code in it. Use <strong>paginate_comments_links()</strong> or <strong>the_comments_navigation</strong> or <strong>the_comments_pagination</strong> or <strong>next_comments_link()</strong> and <strong>previous_comments_link()</strong> to add comment pagination.", 'theme-check' )
46	+ );
47	+ }
48	+
49	+ return true;
50	+ }
51	+
52	+ /**
53	+ * Get error messages from the checks.
54	+ *
55	+ * @return array Error message.
56	+ */
57	+ public function getError() {
58	+ return $this->error;
59	+ }
60	+ }
61	+
62	+ $themechecks[] = new Comment_Pagination_Check();

checks/class-comment-reply-check.php ADDED Viewed

	@@ -0,0 +1,63 @@


1	+ <?php
2	+ /**
3	+ * Checks if the comment reply script is included in classic themes
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Checks if the comment reply script is included in classic themes.
10	+ *
11	+ * Checks if the comment reply script is included. If not, recommend it.
12	+ */
13	+ class Comment_Reply_Check implements themecheck {
14	+ /**
15	+ * Error messages, warnings and info notices.
16	+ *
17	+ * @var array $error
18	+ */
19	+ protected $error = array();
20	+
21	+ /**
22	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
23	+ *
24	+ * @param array $php_files File paths and content for PHP files.
25	+ * @param array $css_files File paths and content for CSS files.
26	+ * @param array $other_files Folder names, file paths and content for other files.
27	+ */
28	+ public function check( $php_files, $css_files, $other_files ) {
29	+
30	+ $php = implode( ' ', $php_files );
31	+
32	+ checkcount();
33	+
34	+ if ( ! preg_match( '/wp_enqueue_script\(\s?("\|\')comment-reply("\|\')/i', $php ) ) {
35	+ if ( ! preg_match( '/comment-reply/', $php ) ) {
36	+ $this->error[] = sprintf(
37	+ '<span class="tc-lead tc-recommended">%s</span>: %s',
38	+ __( 'RECOMMENDED', 'theme-check' ),
39	+ __( 'Could not find the <strong>comment-reply</strong> script enqueued.', 'theme-check' )
40	+ );
41	+ } else {
42	+ $this->error[] = sprintf(
43	+ '<span class="tc-lead tc-info">%s</span>: %s',
44	+ __( 'INFO', 'theme-check' ),
45	+ __( 'Could not find the <strong>comment-reply</strong> script enqueued, however a reference to \'comment-reply\' was found. Make sure that the comment-reply script is being enqueued properly on singular pages.', 'theme-check' )
46	+ );
47	+ }
48	+ }
49	+
50	+ return true;
51	+ }
52	+
53	+ /**
54	+ * Get error messages from the checks.
55	+ *
56	+ * @return array Error message.
57	+ */
58	+ public function getError() {
59	+ return $this->error;
60	+ }
61	+ }
62	+
63	+ $themechecks[] = new Comment_Reply_Check();

checks/class-comments-check.php ADDED Viewed

	@@ -0,0 +1,67 @@


1	+ <?php
2	+ /**
3	+ * Checks if comment templates are included in classic themes
4	+ *
5	+ * @package Theme Check
6	+ */
7	+
8	+ /**
9	+ * Checks if comment templates are included in classic themes.
10	+ *
11	+ * Checks if comment templates are included. If not, recommend them.
12	+ */
13	+ class Comments_Check implements themecheck {
14	+ /**
15	+ * Error messages, warnings and info notices.
16	+ *
17	+ * @var array $error
18	+ */
19	+ protected $error = array();
20	+
21	+ /**
22	+ * Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
23	+ *
24	+ * @param array $php_files File paths and content for PHP files.
25	+ * @param array $css_files File paths and content for CSS files.
26	+ * @param array $other_files Folder names, file paths and content for other files.
27	+ */
28	+ public function check( $php_files, $css_files, $other_files ) {
29	+
30	+ $php = implode( ' ', $php_files );
31	+
32	+ $checks = array(
33	+ 'comments_template\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/comments_template/">comments_template</a><pre> <?php comments_template( $file, $separate_comments ); ?></pre>', 'theme-check' ),
34	+ 'wp_list_comments\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/wp_list_comments/">wp_list_comments</a><pre> <?php wp_list_comments( $args ); ?></pre>', 'theme-check' ),
35	+ 'comment_form\s*\(' => __( 'See: <a href="https://developer.wordpress.org/reference/functions/comment_form/">comment_form</a><pre> <?php comment_form(); ?></pre>', 'theme-check' ),
36	+ );
37	+
38	+ foreach ( $checks as $key => $check ) {
39	+ checkcount();
40	+ if ( ! preg_match( '/' . $key . '/i', $php ) ) {
41	+ $key = str_replace( '\s*\(', '', $key );
42	+ $this->error[] = sprintf(
43	+ '<span class="tc-lead tc-recommended">%s</span>: %s',
44	+ __( 'RECOMMENDED', 'theme-check' ),
45	+ sprintf(
46	+ __( 'Could not find %1$s. %2$s', 'theme-check' ),
47	+ '<strong>' . $key . '</strong>',
48	+ $check
49	+ )
50	+ );
51	+ }
52	+ }
53	+
54	+ return true;
55	+ }
56	+
57	+ /**
58	+ * Get error messages from the checks.
59	+ *
60	+ * @return array Error message.
61	+ */
62	+ public function getError() {
63	+ return $this->error;
64	+ }
65	+ }
66	+
67	+ $themechecks[] = new Comments_Check();

checks/class-constants-check.php ADDED Viewed

	@@ -0,0 +1,83 @@