14
Validation results

Crypterio

Crypterio

WordPress 4.9.6 theme
14
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="' . $link . '" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen> in file vc_video.php.
    Line 32: $embed = '<iframe src='' . $link . '' frameborder='0' webkitallowfullscreen mozallowf
  2. Malware : Operations on file system fopen was found in the file white_list.php
    Line 210: $df = fopen('php://output', 'w');
    fclose was found in the file white_list.php
    Line 215: fclose($df);
    file_get_contents was found in the file main.php
    Line 15: $this->announcement = json_decode(file_get_contents($this->apiurl), true);
    file_get_contents was found in the file functions.php
    Line 103: $json = json_decode(file_get_contents($path), true);
    Line 226: $response = file_get_contents('https://www.google.com/recaptcha/api/siteverify', false,
    file_get_contents was found in the file functions.php
    Line 103: $json = json_decode(file_get_contents($path), true);
    Line 226: $response = file_get_contents('https://www.google.com/recaptcha/api/siteverify', false,
  3. Admin menu : Themes should use add_theme_page() for adding admin pages. File white_list.php :
    Line 58: add_submenu_page(
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip virtual_coin_widgets.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsThe tag blue has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.The tag fluid-layout has been deprecated, it must be removed from style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Raised:' in file contract.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s upcoming ICO' in file upcoming.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s ended ICO' in file finished.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s active ICO' in file live.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>will start %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>is active until %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>completed on %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Export CSV' in file list.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'First name' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Last name' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Email' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Expected ETH ICO Participation Amount' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'ERC-20 Wallet Address' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Government-Issued ID Card or Passport' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Country' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are crypterio, pearl_header_builder, stm-configurations, woocommerce, blockchain, textdomain, stm_domain, js_composer, pearl.
  3. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  4. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  5. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  6. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file visual_composer.php.
    Line 3056: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3062: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3056: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3062: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : single.php
    Line 20: <?php require_once($tpls . 'title_and_icon.php'); ?>
    Line 22: <?php require_once($tpls . 'ico_date_and_image.php'); ?>
    Line 28: <?php require_once($tpls . 'market_and_returns.php'); ?>
    Line 30: <?php require_once($tpls . 'rates.php'); ?>
    Line 32: <?php require_once($tpls . 'token_sale.php'); ?>
    Line 34: <?php require_once($tpls . 'short_review.php'); ?>
    Line 36: <?php require_once($tpls . 'additional_links.php'); ?>
    Line 38: <?php require_once($tpls . 'screenshots.php'); ?>
    Line 40: <?php require_once($tpls . 'related.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : related.php
    Line 21: require_once(get_template_directory() . '/partials/vc_parts/ico_grid/' . $s
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single-ico_listing.php
    Line 20: <?php require_once($tpls . 'title_and_icon.php'); ?>
    Line 22: <?php require_once($tpls . 'ico_date_and_image.php'); ?>
    Line 28: <?php require_once($tpls . 'token_sale.php'); ?>
    Line 30: <?php require_once($tpls . 'additional_links.php'); ?>
    Line 32: <?php require_once($tpls . 'screenshots.php'); ?>
    Line 34: <?php require_once($tpls . 'market_and_returns.php'); ?>
    Line 36: <?php require_once($tpls . 'rates.php'); ?>
    Line 38: <?php require_once($tpls . 'short_review.php'); ?>
    Line 40: <?php require_once($tpls . 'related.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : envato-theme-update.php
    Line 47: require_once( 'class-envato-protected-api.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extras.php
    Line 1286: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    Line 1309: require_once( ABSPATH . 'wp-admin/includes/image.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 894: include_once( ABSPATH . 'wp-admin/includes/class-wp-upgrader.php' );
    Line 1080: require(envato_market()->get_plugin_path() . $path);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 8: require_once($includes . 'envato-market/envato-market.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 2: require_once(get_template_directory() . '/inc/admin/product_registration/ad
    Line 3: require_once(get_template_directory() . '/inc/admin/announcement/main.php')
    Line 4: require_once(get_template_directory() . '/inc/admin/white_list/white_list.p
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

77
Critical alerts
  1. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip virtual_coin_widgets.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsThe tag blue has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.The tag fluid-layout has been deprecated, it must be removed from style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Raised:' in file contract.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s upcoming ICO' in file upcoming.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s ended ICO' in file finished.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'View all %s active ICO' in file live.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>will start %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>is active until %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Token sale <strong>completed on %s</strong>' in file ico_date_and_image.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Export CSV' in file list.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'First name' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Last name' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Email' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Expected ETH ICO Participation Amount' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'ERC-20 Wallet Address' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Government-Issued ID Card or Passport' in file functions.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Country' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are crypterio, pearl_header_builder, stm-configurations, woocommerce, blockchain, textdomain, stm_domain, js_composer, pearl.
  3. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file visual_composer.php.
    Line 3056: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3062: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3056: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
    Line 3062: 'description' => wp_kses( __( '<a href='http://www.latlong.net/convert-address-to-lat-long.html'>Here is a tool</a>
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : single.php
    Line 20: <?php require_once($tpls . 'title_and_icon.php'); ?>
    Line 22: <?php require_once($tpls . 'ico_date_and_image.php'); ?>
    Line 28: <?php require_once($tpls . 'market_and_returns.php'); ?>
    Line 30: <?php require_once($tpls . 'rates.php'); ?>
    Line 32: <?php require_once($tpls . 'token_sale.php'); ?>
    Line 34: <?php require_once($tpls . 'short_review.php'); ?>
    Line 36: <?php require_once($tpls . 'additional_links.php'); ?>
    Line 38: <?php require_once($tpls . 'screenshots.php'); ?>
    Line 40: <?php require_once($tpls . 'related.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : related.php
    Line 21: require_once(get_template_directory() . '/partials/vc_parts/ico_grid/' . $s
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single-ico_listing.php
    Line 20: <?php require_once($tpls . 'title_and_icon.php'); ?>
    Line 22: <?php require_once($tpls . 'ico_date_and_image.php'); ?>
    Line 28: <?php require_once($tpls . 'token_sale.php'); ?>
    Line 30: <?php require_once($tpls . 'additional_links.php'); ?>
    Line 32: <?php require_once($tpls . 'screenshots.php'); ?>
    Line 34: <?php require_once($tpls . 'market_and_returns.php'); ?>
    Line 36: <?php require_once($tpls . 'rates.php'); ?>
    Line 38: <?php require_once($tpls . 'short_review.php'); ?>
    Line 40: <?php require_once($tpls . 'related.php'); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : envato-theme-update.php
    Line 47: require_once( 'class-envato-protected-api.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : extras.php
    Line 1286: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    Line 1309: require_once( ABSPATH . 'wp-admin/includes/image.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 894: include_once( ABSPATH . 'wp-admin/includes/class-wp-upgrader.php' );
    Line 1080: require(envato_market()->get_plugin_path() . $path);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 8: require_once($includes . 'envato-market/envato-market.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : admin.php
    Line 2: require_once(get_template_directory() . '/inc/admin/product_registration/ad
    Line 3: require_once(get_template_directory() . '/inc/admin/announcement/main.php')
    Line 4: require_once(get_template_directory() . '/inc/admin/white_list/white_list.p
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes