<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
Thank you,<BR>
I was thinking more theme specific, the likes of<BR>
<A href="http://wordpress.stackexchange.com/questions/13539/what-are-security-best-practices-for-wordpress-plugins-and-themes">http://wordpress.stackexchange.com/questions/13539/what-are-security-best-practices-for-wordpress-plugins-and-themes</A><BR>
<BR>
<BR>
<HR id=stopSpelling>
From: emil@themeid.com<BR>Date: Sun, 17 Apr 2011 22:44:43 -0500<BR>To: theme-reviewers@lists.wordpress.org<BR>Subject: Re: [theme-reviewers] Where can I learn more about theme security<BR><BR><FONT size=2><FONT face=tahoma,sans-serif>You can start from basics such as <A href="http://php.net/manual/en/security.php" target=_blank>http://php.net/manual/en/security.php</A> and move on to <A href="http://phpsec.org/projects/guide/" target=_blank>http://phpsec.org/projects/guide/</A> and also <A href="http://codex.wordpress.org/Hardening_WordPress" target=_blank>http://codex.wordpress.org/Hardening_WordPress</A> there you will find an additional resources as well.<BR clear=all></FONT></FONT>
<DIV><STRONG>----</STRONG></DIV>
<DIV><STRONG>Emil Uzelac</STRONG> | ThemeID | T: 224-444-0006 | Twitter: @EmilUzelac | E: <A href="mailto:emil@themeid.com">emil@themeid.com</A> | <A href="http://themeid.com/" target=_blank>http://themeid.com</A></DIV>
<DIV><FONT color=#999999>Make everything as simple as possible, but not simpler. - Albert Einstein</FONT></DIV><BR><BR><BR>
<DIV class=ecxgmail_quote>On Sun, Apr 17, 2011 at 10:34 PM, <A href="mailto:myazalea@hotmail.com">myazalea@hotmail.com</A> <SPAN dir=ltr><<A href="mailto:myazalea@hotmail.com">myazalea@hotmail.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>As the title sais.<BR>Are there any mustreads, and what sources are reliable. There isnt alot on this on Wordpress.org or i missed it. <BR><BR>or should I just learn more php?<BR><BR><BR>Skickat från min HTC<BR><BR>
<DIV>----- Reply message -----<BR>Från: "Emil Uzelac" <<A href="mailto:emil@themeid.com">emil@themeid.com</A>><BR>Till: <<A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A>><BR>Rubrik: [theme-reviewers] Join the team<BR>Datum: mån, apr 18, 2011 04:04<BR><BR></DIV><BR><FONT size=2><FONT face=tahoma,sans-serif>menu is OK, widgetized menu is OK too ;)<BR clear=all></FONT></FONT>
<DIV><STRONG>----</STRONG></DIV>
<DIV><STRONG>Emil Uzelac</STRONG> | ThemeID | T: 224-444-0006 | Twitter: @EmilUzelac | E: <A href="mailto:emil@themeid.com">emil@themeid.com</A> | <A href="http://themeid.com/" target=_blank>http://themeid.com</A></DIV>
<DIV><FONT color=#999999>Make everything as simple as possible, but not simpler. - Albert Einstein</FONT></DIV><BR><BR><BR>
<DIV class=ecxgmail_quote>On Sun, Apr 17, 2011 at 7:54 PM, Chip Bennett <SPAN dir=ltr><<A href="mailto:chip@chipbennett.net">chip@chipbennett.net</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>I actually disagree regarding the "Menu" Widget - maybe. :)
<DIV><BR></DIV>
<DIV>If the Theme simply provides a Widgetized sidebar, and no "Navigation Menu" markup, then this approach is fine. However, if the Theme has what would reasonably considered to be the design intent of a Navigation Menu, then that implementation must support the core Nav Menu feature.</DIV>
<DIV><BR></DIV>
<DIV>Basically: Themes are not *required* to provide Navigation Menus, but if they *do* provide a Navigation Menu, then it must support the core functionality.</DIV>
<DIV><BR></DIV>
<DIV><FONT color=#888888>Chip</FONT>
<DIV>
<DIV></DIV>
<DIV><BR><BR>
<DIV class=ecxgmail_quote>On Sun, Apr 17, 2011 at 7:13 PM, Emil Uzelac <SPAN dir=ltr><<A href="mailto:emil@themeid.com">emil@themeid.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>
<DIV>
<DIV><FONT size=2><FONT face=tahoma,sans-serif>1. The theme uses the text domain of Twenty Ten in a few spots. If I remember correctly from lurking on the list this is a reason for failure of the theme.</FONT></FONT></DIV></DIV>
<DIV><FONT face=Tahoma><STRONG>Yes, Twenty Ten should be changed to i.e. silverville</STRONG></FONT></DIV>
<DIV>
<DIV><STRONG><FONT face=Tahoma></FONT></STRONG> </DIV>
<DIV><FONT size=2><FONT face=tahoma,sans-serif>2. They use a widget for the menu and instruct the user to add the Pages widget. It seems to me that it's a much better option to use a WordPress menu which defaults to list pages. I don't believe this is an issue for a fail but probably a good suggestion as an update to the user.</FONT></FONT></DIV></DIV>
<DIV><FONT face=Tahoma><STRONG>This part is just fine. As long as there are options for menu and being fully functional.</STRONG></FONT></DIV>
<DIV>
<DIV><STRONG><FONT face=Tahoma></FONT></STRONG> </DIV>
<DIV><FONT size=2><FONT face=tahoma,sans-serif>3. The CSS fails on the background-color since it's value is set to 'none' when it should be set to 'transparent'. Would this typically be a reason for failure if all other CSS is okay?</FONT></FONT></DIV></DIV>
<DIV><FONT face=Tahoma><STRONG>background-color: none; is invalid and it should be transparent. Recommendation would be background: none; or background-image: none; and not many people use the last one anymore. It's shortcoded via background.</STRONG></FONT></DIV>
<DIV>
<DIV><STRONG><FONT face=Tahoma></FONT></STRONG> </DIV>
<DIV><FONT size=2><FONT face=tahoma,sans-serif>4. There are a number of other 'recommended' items in Theme Check but these are not a reason to fail a theme correct?</FONT></FONT></DIV></DIV>
<DIV><FONT size=2><FONT face=tahoma,sans-serif><STRONG>Recommended isn't required, if recommendations don't cause problems, no need to fail.<BR clear=all></STRONG></FONT></FONT></DIV><FONT size=2><FONT face=tahoma,sans-serif></FONT></FONT>
<DIV>Emil</DIV>
<DIV><STRONG></STRONG> </DIV>
<DIV><STRONG>----</STRONG></DIV>
<DIV><STRONG>Emil Uzelac</STRONG> | ThemeID | T: 224-444-0006 | Twitter: @EmilUzelac | E: <A href="mailto:emil@themeid.com">emil@themeid.com</A> | <A href="http://themeid.com/" target=_blank>http://themeid.com</A></DIV><FONT color=#888888>
<DIV><FONT color=#999999>Make everything as simple as possible, but not simpler. - Albert Einstein</FONT></DIV></FONT>
<DIV>
<DIV></DIV>
<DIV><BR><BR><BR>
<DIV class=ecxgmail_quote>On Sun, Apr 17, 2011 at 7:01 PM, Curtis McHale <SPAN dir=ltr><<A href="mailto:curtis@curtismchale.ca">curtis@curtismchale.ca</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>I have a few questions about my first theme review.
<DIV><BR></DIV>
<DIV>1. The theme uses the text domain of Twenty Ten in a few spots. If I remember correctly from lurking on the list this is a reason for failure of the theme..</DIV>
<DIV>2. They use a widget for the menu and instruct the user to add the Pages widget. It seems to me that it's a much better option to use a WordPress menu which defaults to list pages. I don't believe this is an issue for a fail but probably a good suggestion as an update to the user.</DIV>
<DIV>3. The CSS fails on the background-color since it's value is set to 'none' when it should be set to 'transparent'. Would this typically be a reason for failure if all other CSS is okay?</DIV>
<DIV>4. There are a number of other 'recommended' items in Theme Check but these are not a reason to fail a theme correct?</DIV>
<DIV><BR></DIV>
<DIV>I could probably go further in to the theme but I wanted to double check on the text domain item before I did.</DIV>
<DIV>
<DIV><BR>Curtis McHale<BR>PH: 604.751.3482<BR><A href="http://www.curtismchale.ca/" target=_blank>http://www.curtismchale.ca</A><BR>Linkedin: <A href="http://www.linkedin.com/in/curtismchale" target=_blank>http://www.linkedin.com/in/curtismchale</A><BR>Twitter: <A href="http://twitter.com/curtismchale" target=_blank>twitter.com/curtismchale</A><BR><BR><BR><BR></DIV>
<DIV>
<DIV></DIV>
<DIV>
<DIV class=ecxgmail_quote>On Sat, Apr 16, 2011 at 4:39 PM, Edward Caissie <SPAN dir=ltr><<A href="mailto:edward.caissie@gmail.com">edward.caissie@gmail.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>Here ya go: <A href="http://themes.trac.wordpress.org/ticket/3320" target=_blank>http://themes.trac.wordpress.org/ticket/3320</A><BR>This will get you started ...<BR><BR><BR>Cais.<BR><BR>
<DIV class=ecxgmail_quote>On Sat, Apr 16, 2011 at 7:15 PM, Curtis McHale <SPAN dir=ltr><<A href="mailto:curtis@curtismchale.ca">curtis@curtismchale.ca</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; PADDING-LEFT: 1ex" class=ecxgmail_quote>Figured I'd finally get off my butt and join the team after looking at the list for a few months. My trac name is curtismchale
<DIV><BR>Curtis McHale<BR>PH: <A target=_blank>604.751.3482</A><BR><A href="http://www.curtismchale.ca/" target=_blank>http://www.curtismchale.ca</A><BR>Linkedin: <A href="http://www.linkedin.com/in/curtismchale" target=_blank>http://www.linkedin.com/in/curtismchale</A><BR>Twitter: <A href="http://twitter.com/curtismchale" target=_blank>twitter.com/curtismchale</A><BR><BR></DIV><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR></DIV></DIV><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR><BR>_______________________________________________<BR>theme-reviewers mailing list<BR><A href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</A><BR><A href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target=_blank>http://lists.wordpress.org/mailman/listinfo/theme-reviewers</A><BR><BR></BLOCKQUOTE></DIV><BR><BR>_______________________________________________ theme-reviewers mailing list theme-reviewers@lists.wordpress.org http://lists.wordpress.org/mailman/listinfo/theme-reviewers                                            </body>
</html>