0
Validation results

Kalium

Kalium

WordPress 4.9.5 theme
0
Critical alerts
  1. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Modification of PHP server settings Found ini_set in file Less.php.
    Ligne94: @ini_set('mbstring.internal_encoding', 'ascii');
    Ligne184: @ini_set('precision',16);
    Ligne222: @ini_set('precision',$precision);
    Ligne228: @ini_set('mbstring.internal_encoding', $this->mb_internal_encoding);
    Found ini_set in file laborator_functions.php.
    Ligne908: @ini_set( 'memory_limit', '256M' );
  3. Security breaches : Use of base64_decode() Found base64_decode in file lab_google_map.php.
    Ligne37: $map_style_b64dec = rawurldecode( base64_decode( strip_tags( $map_style ) ) );
    Ligne46: } elseif ( base64_decode( $map_style ) ) {
    Found base64_decode in file laborator_demo_content_importer.php.
    Ligne604: $smof_data = unserialize( base64_decode( $theme_options ) );
    Ligne634: $custom_css_options = json_decode( base64_decode( $custom_css ) );
    Found base64_decode in file functions.interface.php.
    Ligne234: $smof_data = unserialize(base64_decode($_POST['data'])); //100% safe - ignore theme check nag
    Found base64_decode in file init.php.
    Ligne125: $details   = ( array ) json_decode( base64_decode( str_rot13( $details ) ) );
  4. Security breaches : Use of base64_encode() Found base64_encode in file lab_contact_form.php.
     <input type='hidden' name='request' value='<?php echo str_rot13(base64_encode(json_encode($atts))); ?>' />
    Found base64_encode in file laborator_custom_css.php.
     echo base64_encode( json_encode( $options ) );
    Found base64_encode in file class.options_machine.php.
     $output .= '<textarea id='export_data' rows='8'>'.base64_encode(serialize($smof_data)) /* 100% safe - ignore theme check nag 
    Found base64_encode in file Less.php.
     $buf = $useBase64 ? base64_encode($buf) : rawurlencode($buf);
     $returner = ''data:image/svg+xml;base64,'.base64_encode($returner).''';
  5. Security breaches : Use of str_rot13() Found str_rot13 in file lab_contact_form.php.
    Ligne42: <input type='hidden' name='request' value='<?php echo str_rot13(base64_encode(json_encode($atts))); ?>' />
    Found str_rot13 in file init.php.
    Ligne125: $details   = ( array ) json_decode( base64_decode( str_rot13( $details ) ) );
  6. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" height="100%" src="https://www.youtube.com/embed/' . $video_url_args['v'] . '?' . ( isset( $video_url_args['list'] ) ? "list={$video_url_args['list']}&" : '' ) . 'rel=0&controls=1&showinfo=0" frameborder="0" allowfullscreen> in file portfolio-gallery-with-description.php.
    Ligne316: echo '<iframe width='100%' height='100%' src='https://www.youtube.com/embed/' . $
    Found <iframe width="100%" height="100%" src="https://www.youtube.com/embed/' . $video_url_args['v'] . '?' . ( isset( $video_url_args['list'] ) ? "list={$video_url_args['list']}&" : '' ) . 'rel=0&amp;controls=1&amp;showinfo=0&amp;autoplay=' . ( $auto_play ? 1 : 0 ) . '" frameborder="0" allowfullscreen> in file portfolio-gallery.php.
    Ligne253: echo '<iframe width='100%' height='100%' src='https://www.youtube.com/embed/' . $
  7. Malware : Operations on file system fwrite was found in the file scss.inc.php
    Ligne830: fwrite(STDERR, 'Line $line DEBUG: $value\n');
    file_get_contents was found in the file scss.inc.php
    Ligne1652: $code = file_get_contents($path);
    Ligne4430: $imports = unserialize(file_get_contents($icache));
    Ligne4468: $css = $this->scss->compile(file_get_contents($in), $in);
    Ligne4529: echo file_get_contents($output);
    file_get_contents was found in the file scss.inc.php
    Ligne1652: $code = file_get_contents($path);
    Ligne4430: $imports = unserialize(file_get_contents($icache));
    Ligne4468: $css = $this->scss->compile(file_get_contents($in), $in);
    Ligne4529: echo file_get_contents($output);
    file_get_contents was found in the file scss.inc.php
    Ligne1652: $code = file_get_contents($path);
    Ligne4430: $imports = unserialize(file_get_contents($icache));
    Ligne4468: $css = $this->scss->compile(file_get_contents($in), $in);
    Ligne4529: echo file_get_contents($output);
    file_put_contents was found in the file scss.inc.php
    Ligne4475: file_put_contents($out, $css);
    Ligne4476: file_put_contents($this->importsCacheName($out),
    file_put_contents was found in the file scss.inc.php
    Ligne4475: file_put_contents($out, $css);
    Ligne4476: file_put_contents($this->importsCacheName($out),
    file_get_contents was found in the file scss.inc.php
    Ligne1652: $code = file_get_contents($path);
    Ligne4430: $imports = unserialize(file_get_contents($icache));
    Ligne4468: $css = $this->scss->compile(file_get_contents($in), $in);
    Ligne4529: echo file_get_contents($output);
    file_get_contents was found in the file lessc.inc.php
    Ligne121: $root = $parser->parse(file_get_contents($realPath));
    Ligne1830: $out = $this->compile(file_get_contents($fname), $fname);
    fwrite was found in the file lessc.inc.php
    Ligne687: // fwrite(STDERR,'failed to find block: '.implode(' > ', $path).'\n');
    file_get_contents was found in the file lessc.inc.php
    Ligne121: $root = $parser->parse(file_get_contents($realPath));
    Ligne1830: $out = $this->compile(file_get_contents($fname), $fname);
    file_put_contents was found in the file lessc.inc.php
    Ligne1835: return file_put_contents($outFname, $out);
    file_get_contents was found in the file parsers.php
    Ligne66: $success = $dom->loadXML( file_get_contents( $file ) );
    Ligne296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    file_get_contents was found in the file parsers.php
    Ligne66: $success = $dom->loadXML( file_get_contents( $file ) );
    Ligne296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    fopen was found in the file parsers.php
    Ligne442: $fp = $this->fopen( $file, 'r' );
    Ligne668: function fopen( $filename, $mode = 'r' ) {
    Ligne671: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Ligne491: $this->fclose($fp);
    Ligne686: function fclose( $fp ) {
    Ligne689: return fclose( $fp );
    fopen was found in the file parsers.php
    Ligne442: $fp = $this->fopen( $file, 'r' );
    Ligne668: function fopen( $filename, $mode = 'r' ) {
    Ligne671: return fopen( $filename, $mode );
    fopen was found in the file parsers.php
    Ligne442: $fp = $this->fopen( $file, 'r' );
    Ligne668: function fopen( $filename, $mode = 'r' ) {
    Ligne671: return fopen( $filename, $mode );
    fclose was found in the file parsers.php
    Ligne491: $this->fclose($fp);
    Ligne686: function fclose( $fp ) {
    Ligne689: return fclose( $fp );
    fclose was found in the file parsers.php
    Ligne491: $this->fclose($fp);
    Ligne686: function fclose( $fp ) {
    Ligne689: return fclose( $fp );
    file_get_contents was found in the file import.php
    Ligne89: $data = file_get_contents( $file );
    file_get_contents was found in the file laborator_demo_content_importer.php
    Ligne603: if ( $theme_options = file_get_contents( $theme_options ) ) {
    Ligne633: if ($custom_css = file_get_contents( $custom_css ) ) {
    file_get_contents was found in the file laborator_demo_content_importer.php
    Ligne603: if ( $theme_options = file_get_contents( $theme_options ) ) {
    Ligne633: if ($custom_css = file_get_contents( $custom_css ) ) {
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_put_contents was found in the file Less.php
    Ligne565: file_put_contents( $cache_file, serialize($rules) );
    Ligne568: file_put_contents( $cache_file, '<?php return '.self::ArgString($rules).'; 
    Ligne572: file_put_contents( $cache_file, '<?php return '.var_export($rules,true).'; 
    Ligne10312: if(file_put_contents($file, $content) === false){
    file_put_contents was found in the file Less.php
    Ligne565: file_put_contents( $cache_file, serialize($rules) );
    Ligne568: file_put_contents( $cache_file, '<?php return '.self::ArgString($rules).'; 
    Ligne572: file_put_contents( $cache_file, '<?php return '.var_export($rules,true).'; 
    Ligne10312: if(file_put_contents($file, $content) === false){
    file_put_contents was found in the file Less.php
    Ligne565: file_put_contents( $cache_file, serialize($rules) );
    Ligne568: file_put_contents( $cache_file, '<?php return '.self::ArgString($rules).'; 
    Ligne572: file_put_contents( $cache_file, '<?php return '.var_export($rules,true).'; 
    Ligne10312: if(file_put_contents($file, $content) === false){
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_put_contents was found in the file Less.php
    Ligne565: file_put_contents( $cache_file, serialize($rules) );
    Ligne568: file_put_contents( $cache_file, '<?php return '.self::ArgString($rules).'; 
    Ligne572: file_put_contents( $cache_file, '<?php return '.var_export($rules,true).'; 
    Ligne10312: if(file_put_contents($file, $content) === false){
    file_get_contents was found in the file Less.php
    Ligne524: $cache = unserialize(file_get_contents($cache_file));
    Ligne591: $this->input = file_get_contents( $file_path );
    Ligne3861: $buf = @file_get_contents($filePath);
    Ligne5989: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne8614: $contents = new Less_Tree_Anonymous( file_get_contents($full_path), 0, array(), true );
    Ligne9572: $this->input = file_get_contents( $this->currentFile['filename'] );
    Ligne10435: $content[] = file_get_contents($sourceFile);
    file_put_contents was found in the file Cache.php
    Ligne75: file_put_contents($vars_file, $lessvars);
    Ligne119: file_put_contents( $list_file, $cache );
    Ligne123: file_put_contents( $output_file, $compiled );
    file_put_contents was found in the file Cache.php
    Ligne75: file_put_contents($vars_file, $lessvars);
    Ligne119: file_put_contents( $list_file, $cache );
    Ligne123: file_put_contents( $output_file, $compiled );
    file_put_contents was found in the file Cache.php
    Ligne75: file_put_contents($vars_file, $lessvars);
    Ligne119: file_put_contents( $list_file, $cache );
    Ligne123: file_put_contents( $output_file, $compiled );
    file_get_contents was found in the file Cache.php
    Ligne303: $list = explode('\n',file_get_contents($list_file));
    file_get_contents was found in the file laborator_functions.php
    Ligne861: echo file_get_contents( $svg_path );
    Ligne914: $skin_generator = file_get_contents( THEMEDIR . 'assets/less/skin-generator.less' );
    Ligne927: $css_contents = file_get_contents( $file );
    Ligne1114: if ( ! trim( file_get_contents( $custom_skin_path_full ) ) ) {
    file_get_contents was found in the file laborator_functions.php
    Ligne861: echo file_get_contents( $svg_path );
    Ligne914: $skin_generator = file_get_contents( THEMEDIR . 'assets/less/skin-generator.less' );
    Ligne927: $css_contents = file_get_contents( $file );
    Ligne1114: if ( ! trim( file_get_contents( $custom_skin_path_full ) ) ) {
    file_get_contents was found in the file laborator_functions.php
    Ligne861: echo file_get_contents( $svg_path );
    Ligne914: $skin_generator = file_get_contents( THEMEDIR . 'assets/less/skin-generator.less' );
    Ligne927: $css_contents = file_get_contents( $file );
    Ligne1114: if ( ! trim( file_get_contents( $custom_skin_path_full ) ) ) {
    file_get_contents was found in the file laborator_functions.php
    Ligne861: echo file_get_contents( $svg_path );
    Ligne914: $skin_generator = file_get_contents( THEMEDIR . 'assets/less/skin-generator.less' );
    Ligne927: $css_contents = file_get_contents( $file );
    Ligne1114: if ( ! trim( file_get_contents( $custom_skin_path_full ) ) ) {
    fopen was found in the file laborator_functions.php
    Ligne1135: $fp = fopen( $custom_skin_path , 'w' );
    fwrite was found in the file laborator_functions.php
    Ligne1136: fwrite( $fp, $kalium_skin_custom_css );
    fclose was found in the file laborator_functions.php
    Ligne1137: fclose( $fp );
  8. Admin menu : Themes should use add_theme_page() for adding admin pages. File laborator_actions.php :
    Ligne253: add_menu_page( 'Laborator', 'Laborator', 'edit_theme_options', 'laborator_o
    File laborator_actions.php :
    Ligne365: add_submenu_page( 'laborator_options', 'Update Plugins', 'Update Plugins' .
    Ligne371: add_submenu_page( 'laborator_options', 'Documentation', 'Theme Help', 'edit
    Ligne372: add_submenu_page( 'themes.php', 'Documentation', 'Theme Help', 'edit_theme_
    Ligne377: add_submenu_page( 'laborator_options', 'Browse Our Themes', 'Browse Our The
    File laborator_actions.php :
    Ligne365: add_submenu_page( 'laborator_options', 'Update Plugins', 'Update Plugins' .
    Ligne371: add_submenu_page( 'laborator_options', 'Documentation', 'Theme Help', 'edit
    Ligne372: add_submenu_page( 'themes.php', 'Documentation', 'Theme Help', 'edit_theme_
    Ligne377: add_submenu_page( 'laborator_options', 'Browse Our Themes', 'Browse Our The
    File laborator_actions.php :
    Ligne365: add_submenu_page( 'laborator_options', 'Update Plugins', 'Update Plugins' .
    Ligne371: add_submenu_page( 'laborator_options', 'Documentation', 'Theme Help', 'edit
    Ligne372: add_submenu_page( 'themes.php', 'Documentation', 'Theme Help', 'edit_theme_
    Ligne377: add_submenu_page( 'laborator_options', 'Browse Our Themes', 'Browse Our The
    File laborator_actions.php :
    Ligne365: add_submenu_page( 'laborator_options', 'Update Plugins', 'Update Plugins' .
    Ligne371: add_submenu_page( 'laborator_options', 'Documentation', 'Theme Help', 'edit
    Ligne372: add_submenu_page( 'themes.php', 'Documentation', 'Theme Help', 'edit_theme_
    Ligne377: add_submenu_page( 'laborator_options', 'Browse Our Themes', 'Browse Our The
    File laborator_custom_css.php :
    Ligne18: add_menu_page( 'Custom CSS', 'Custom CSS', 'edit_theme_options', 'laborator
    File page.php :
    Ligne26: $page_hook = add_management_page(
    File laborator_demo_content_importer.php :
    Ligne275: add_submenu_page( 'laborator_options', '1-Click Demo Content Installer', 'D
    File class-tgm-plugin-activation.php :
    Ligne731: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
  9. Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Ligne1107: screen_icon();
    screen_icon found in file page.php. Deprecated since version 3.8.
    Ligne61: <?php screen_icon(); ?>
  10. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne980: $headers = wp_get_http( $url, $upload['file'] );
  11. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip acf-gallery.zip acf-repeater.zip layersliderwp-5.6.10.installable.zip revslider.zip acf-flexible-content.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag agency in style.css header.Found wrong tag architecture in style.css header.Found wrong tag clean in style.css header.Found wrong tag creative in style.css header.Found wrong tag ecommerce in style.css header.Found wrong tag gallery in style.css header.Found wrong tag minimal in style.css header.Found wrong tag shop in style.css header.Found wrong tag kalium in style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s download remaining', '%s downloads remaining', downloads_remaining, 'woocommerce' in file my-downloads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file shipping-calculator.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file cart-totals.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are kalium, woocommerce, downloads_remaining, wordpress-importer, widget-importer-exporter, tgmpa, lab_composer.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file Less.php.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file main.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Ligne1107: screen_icon();
    screen_icon found in file page.php. Deprecated since version 3.8.
    Ligne61: <?php screen_icon(); ?>
  9. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  10. I18N implementation : Proper use of _e(Possible variable $str found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $arg found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $items found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $string found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $val found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $newUnit found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $res found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $key found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $part found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables.
  11. I18N implementation : Proper use of ___all(Possible variable $cvalue found in translation function in shipping-calculator.php. Translation function calls should not contain PHP variables.
  12. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  13. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  14. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in laborator_actions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file laborator_actions.php.
    Ligne486: example: <a href='http://drops.laborator.co/1cTZb' target='_blank'>http://drops.laborator.co/
    Ligne489: View this screenshot to see when the new update is available: <a href='http://drops.laborator.co/141DA' target='_blank'>http://drops.laborator.co/
    Ligne501: Click this link <a href='http://drops.laborator.co/12DUv' target='_blank'>http://drops.laborator.co/
    Ligne504: This screenshot <a href='http://drops.laborator.co/17J6H' target='_blank'>http://drops.laborator.co/
    Possible hard-coded links were found in the file laborator_custom_css.php.
    Ligne226: <h3>Apply your own style in <a href='http://www.lesscss.org/' target='_blank'>LESS</a> language</h3>
    Ligne255: <h3>Apply your own style in <a href='http://sass-lang.com/' target='_blank'>SASS</a> language</h3>
    Ligne314: <p class='laborator-copyrights clear'>&copy; <strong>Custom CSS</strong> plugin created by <a href='http://laborator.co/' target='_blank'>Laborator.co</a></p>
    Possible hard-coded links were found in the file demo-content-page.php.
    Ligne71: To change PHP directives you need to modify <strong>php.ini</strong> file, more information about this you can <a href='http://goo.gl/I9f74U' target='_blank'>search here</a> or contact your hosti
    Ligne116: &copy; This plugin is developed by <a href='http://laborator.co'>Laborator</a>
    Possible hard-coded links were found in the file options.php.
    Ligne36: <a href='http://laborator.co' target='_blank' class='icon-option'></a>
    Possible hard-coded links were found in the file functions.options.php.
    Ligne3253: 'desc' 		=> 'Google maps requires unique API key for each site, click here to learn more about generating <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
    Ligne5140: $of_options[] = array( 	'desc' 		=> 'Icon (optional)<br><small>Note: If you want to set custom icon, enter icon alias from <a href='http://fontawesome.io/icons/' target='_blank'>Font Awesome</a> icon collect
    Possible hard-coded links were found in the file init.php.
    Ligne18: <small>Google maps requires unique API key for each site, click here to learn more about generating <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' st
    Ligne130: 'description' => 'Paste the style code here. Browse map styles in <a href='https://snazzymaps.com/' target='_blank'>SnazzyMaps</a>'
    Ligne181: 'description'    => 'Enter latitude coordinate. To select map coordinates <a href='http://www.latlong.net/convert-address-to-lat-long.html' target='_blank'>cl
    Possible hard-coded links were found in the file init.php.
    Ligne34: 'description'    => 'Dribbble API requires this information in order to work properly. To create an application <a href='http://developer.dribbble.com/' target='_blank'>click here</a>.'
    Possible hard-coded links were found in the file custom-columns.php.
    Ligne72: 'description' => 'Set reveal effect for this element. To preview the animations <a href='http://daneden.github.io/animate.css/' target='_blank'>click here</a>.'
    Possible hard-coded links were found in the file init.php.
    Ligne160: 'description'    => 'Extend portfolio container to the browser edge. <br><small>Note: If you  use full-width container, you need to set this VC row container to <a href='http://drops.laborator.co/16vX6' target='_blank'>Full width</a> as well.</s
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : laborator_actions.php
    Ligne987: include_once( THEMEDIR . 'tpls/blog-query.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : laborator_custom_css.php
    Ligne436: require_once( 'custom-css-lib/lessc.inc.php' );
    Ligne453: require_once( 'custom-css-lib/scss.inc.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : scss.inc.php
    Ligne2816: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : laborator_demo_content_importer.php
    Ligne291: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    Ligne293: include 'demo-content-page.php';
    Ligne324: require 'demo-content-install-pack.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : smof.php
    Ligne84: require_once ( ADMIN_PATH . 'functions/functions.load.php' );
    Ligne85: require_once ( ADMIN_PATH . 'classes/class.options_machine.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions.load.php
    Ligne10: require( ADMIN_PATH . 'functions/functions.php' );
    Ligne11: require( ADMIN_PATH . 'functions/functions.filters.php' );
    Ligne12: require( ADMIN_PATH . 'functions/functions.interface.php' );
    Ligne13: require( ADMIN_PATH . 'functions/functions.options.php' );
    Ligne14: require( ADMIN_PATH . 'functions/functions.admin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions.interface.php
    Ligne84: include_once( ADMIN_PATH . 'front-end/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : Less.php
    Ligne3: require_once( dirname(__FILE__).'/Cache.php');
    Ligne537: return include($cache_file);
    Ligne3840: $mime = require('mime');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : Cache.php
    Ligne3: require_once( dirname(__FILE__).'/Version.php');
    Ligne151: require_once($file);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

0
Critical alerts
  1. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Modification of PHP server settings Found ini_set in file Less.php.
    Ligne94: @ini_set('mbstring.internal_encoding', 'ascii');
    Ligne184: @ini_set('precision',16);
    Ligne222: @ini_set('precision',$precision);
    Ligne228: @ini_set('mbstring.internal_encoding', $this->mb_internal_encoding);
    Found ini_set in file laborator_functions.php.
    Ligne908: @ini_set( 'memory_limit', '256M' );
  3. Security breaches : Use of str_rot13() Found str_rot13 in file lab_contact_form.php.
    Ligne42: <input type='hidden' name='request' value='<?php echo str_rot13(base64_encode(json_encode($atts))); ?>' />
    Found str_rot13 in file init.php.
    Ligne125: $details   = ( array ) json_decode( base64_decode( str_rot13( $details ) ) );
  4. Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Ligne1107: screen_icon();
    screen_icon found in file page.php. Deprecated since version 3.8.
    Ligne61: <?php screen_icon(); ?>
  5. Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.
    Ligne980: $headers = wp_get_http( $url, $upload['file'] );
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was layerslider.zip acf-gallery.zip acf-repeater.zip layersliderwp-5.6.10.installable.zip revslider.zip acf-flexible-content.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag agency in style.css header.Found wrong tag architecture in style.css header.Found wrong tag clean in style.css header.Found wrong tag creative in style.css header.Found wrong tag ecommerce in style.css header.Found wrong tag gallery in style.css header.Found wrong tag minimal in style.css header.Found wrong tag shop in style.css header.Found wrong tag kalium in style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s download remaining', '%s downloads remaining', downloads_remaining, 'woocommerce' in file my-downloads.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file shipping-calculator.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file cart-totals.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are kalium, woocommerce, downloads_remaining, wordpress-importer, widget-importer-exporter, tgmpa, lab_composer.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file Less.php.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file main.css.
  6. Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
    Ligne1107: screen_icon();
    screen_icon found in file page.php. Deprecated since version 3.8.
    Ligne61: <?php screen_icon(); ?>
  7. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  8. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  9. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in laborator_actions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file laborator_actions.php.
    Ligne486: example: <a href='http://drops.laborator.co/1cTZb' target='_blank'>http://drops.laborator.co/
    Ligne489: View this screenshot to see when the new update is available: <a href='http://drops.laborator.co/141DA' target='_blank'>http://drops.laborator.co/
    Ligne501: Click this link <a href='http://drops.laborator.co/12DUv' target='_blank'>http://drops.laborator.co/
    Ligne504: This screenshot <a href='http://drops.laborator.co/17J6H' target='_blank'>http://drops.laborator.co/
    Possible hard-coded links were found in the file laborator_custom_css.php.
    Ligne226: <h3>Apply your own style in <a href='http://www.lesscss.org/' target='_blank'>LESS</a> language</h3>
    Ligne255: <h3>Apply your own style in <a href='http://sass-lang.com/' target='_blank'>SASS</a> language</h3>
    Ligne314: <p class='laborator-copyrights clear'>&copy; <strong>Custom CSS</strong> plugin created by <a href='http://laborator.co/' target='_blank'>Laborator.co</a></p>
    Possible hard-coded links were found in the file demo-content-page.php.
    Ligne71: To change PHP directives you need to modify <strong>php.ini</strong> file, more information about this you can <a href='http://goo.gl/I9f74U' target='_blank'>search here</a> or contact your hosti
    Ligne116: &copy; This plugin is developed by <a href='http://laborator.co'>Laborator</a>
    Possible hard-coded links were found in the file options.php.
    Ligne36: <a href='http://laborator.co' target='_blank' class='icon-option'></a>
    Possible hard-coded links were found in the file functions.options.php.
    Ligne3253: 'desc' 		=> 'Google maps requires unique API key for each site, click here to learn more about generating <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' ta
    Ligne5140: $of_options[] = array( 	'desc' 		=> 'Icon (optional)<br><small>Note: If you want to set custom icon, enter icon alias from <a href='http://fontawesome.io/icons/' target='_blank'>Font Awesome</a> icon collect
    Possible hard-coded links were found in the file init.php.
    Ligne18: <small>Google maps requires unique API key for each site, click here to learn more about generating <a href='https://developers.google.com/maps/documentation/javascript/get-api-key' st
    Ligne130: 'description' => 'Paste the style code here. Browse map styles in <a href='https://snazzymaps.com/' target='_blank'>SnazzyMaps</a>'
    Ligne181: 'description'    => 'Enter latitude coordinate. To select map coordinates <a href='http://www.latlong.net/convert-address-to-lat-long.html' target='_blank'>cl
    Possible hard-coded links were found in the file init.php.
    Ligne34: 'description'    => 'Dribbble API requires this information in order to work properly. To create an application <a href='http://developer.dribbble.com/' target='_blank'>click here</a>.'
    Possible hard-coded links were found in the file custom-columns.php.
    Ligne72: 'description' => 'Set reveal effect for this element. To preview the animations <a href='http://daneden.github.io/animate.css/' target='_blank'>click here</a>.'
    Possible hard-coded links were found in the file init.php.
    Ligne160: 'description'    => 'Extend portfolio container to the browser edge. <br><small>Note: If you  use full-width container, you need to set this VC row container to <a href='http://drops.laborator.co/16vX6' target='_blank'>Full width</a> as well.</s
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : laborator_actions.php
    Ligne987: include_once( THEMEDIR . 'tpls/blog-query.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : laborator_custom_css.php
    Ligne436: require_once( 'custom-css-lib/lessc.inc.php' );
    Ligne453: require_once( 'custom-css-lib/scss.inc.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : scss.inc.php
    Ligne2816: 
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : laborator_demo_content_importer.php
    Ligne291: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    Ligne293: include 'demo-content-page.php';
    Ligne324: require 'demo-content-install-pack.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : smof.php
    Ligne84: require_once ( ADMIN_PATH . 'functions/functions.load.php' );
    Ligne85: require_once ( ADMIN_PATH . 'classes/class.options_machine.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions.load.php
    Ligne10: require( ADMIN_PATH . 'functions/functions.php' );
    Ligne11: require( ADMIN_PATH . 'functions/functions.filters.php' );
    Ligne12: require( ADMIN_PATH . 'functions/functions.interface.php' );
    Ligne13: require( ADMIN_PATH . 'functions/functions.options.php' );
    Ligne14: require( ADMIN_PATH . 'functions/functions.admin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions.interface.php
    Ligne84: include_once( ADMIN_PATH . 'front-end/options.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : Less.php
    Ligne3: require_once( dirname(__FILE__).'/Cache.php');
    Ligne537: return include($cache_file);
    Ligne3840: $mime = require('mime');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : Cache.php
    Ligne3: require_once( dirname(__FILE__).'/Version.php');
    Ligne151: require_once($file);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes