0
Validation results

Appyn

Appyn

WordPress 5.7.1 theme
0
  • THEME TYPEWordPress theme 5.7.1
  • FILE NAMEappyn.zip
  • FILE SIZE2769556 bytes
  • MD5d808e0e96edc2e633112ce3a4bbdbd45
  • SHA1b81476f3898b7eeea466f51ce521f78691e0c902
  • LICENSENone
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • VERSION2.0.4
  • CREATION DATE2021-04-28
  • LAST FILE UPDATE2021-04-28
  • LAST VALIDATION2021-04-28 18:23
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
  2. Security breaches : Use of eval() Found eval in file Strings.php. 271: $xor ^ eval('return 0b' . $part . ';')Found eval in file EvalBarrett.php. 80: eval('$func = function ($x) { ' . $code . '};');155: eval('$func = function ($n) { ' . $code . '};');Found eval in file Engine.php. 1077: $this->reduce = eval('return function(' . static::class . ' $x) use ($func, $class) {1085: $this->reduce = eval('return function(' . static::class . ' $x) use ($n, $fqengine, $class)Found eval in file EvalBarrett.php. 71: eval('$func = function ($n) { ' . $code . '};');111: eval('$func = function ($n) { ' . $code . '};');Found eval in file SymmetricKey.php. 157: * Base value for the eval() implementation $engine switch3092: eval('$func = function ($_action, $_text) { ' . $init_crypt . 'if ($_action3119: * eval()'able string for in-line float to int
  3. Security breaches : Use of PHP sytem calls Found ->exec in file RedisHandler.php. 78: ->exec();Found proc_open in file ProcessHandler.php. 118: $this->process = proc_open($this->command, static::DESCRIPTOR_SPEC, $this->pipes, $this->cwd
  4. Security breaches : Use of backticks execution operators in PHP code Found ` in file MercurialProcessor.php. 52: $result = explode(' ', trim(`hg id -nb`));Found ` in file GitProcessor.php. 53: $branches = `git branch -v --no-abbrev`;
  5. Security breaches : Modification of PHP server settings Found ini_set in file Random.php. 96: ini_set('session.use_cookies', 0);119: ini_set('session.use_cookies', $old_use_cookies);
  6. Security breaches : Use of base64_decode() Found base64_decode in file random_bytes_com_dotnet.php. 74: $buf .= base64_decode((string) $util->GetRandom($bytes, 0));Found base64_decode in file Base64Test.php. 75: \base64_decode($str)Found base64_decode in file X509.php. 551: base64_decode(preg_replace('#-.+-|[\r\n]#', '', $cert['tbsCertificate']['su2279: base64_decode(preg_replace('#-.+-|[\r\n]#', '', $csr['certificationRequestI2391: base64_decode(preg_replace('#-.+-|[\r\n]#', '', $spkac['publicKeyAndChallen3745: $publicKey = base64_decode(preg_replace('#-.+-|[\r\n]#', '', $this->publicKey->toString(Found base64_decode in file OpenSSH.php. 140: $key = base64_decode($parts[0]);145: $key = base64_decode($parts[1]);Found base64_decode in file Client.php. 546: $payload = json_decode(base64_decode($parts[1]), true);Found base64_decode in file JWT.php. 340: return \base64_decode(\strtr($input, '-_', '+/'));
  7. Security breaches : Use of base64_encode() Found base64_encode in file Base64Test.php.
     \base64_encode($random),
    Found base64_encode in file Base64UrlSafeTest.php.
     \strtr(\base64_encode($random), '+/', '-_'),
     \strtr(\base64_encode($random), '+/', '-_'),
    Found base64_encode in file EncodingTest.php.
     \strtr(\base64_encode($rand), '+/', '-_'),
    Found base64_encode in file ChromePHPHandler.php.
     $data = base64_encode(utf8_encode($json));
     $data = base64_encode(utf8_encode($json));
    Found base64_encode in file getallheaders.php.
     $headers['Authorization'] = 'Basic ' . base64_encode($_SERVER['PHP_AUTH_USER'] . ':' . $basic_pass);
    Found base64_encode in file SSH2.php.
     $server_public_host_key = base64_encode($this->server_public_host_key);
    Found base64_encode in file Agent.php.
     $key = PublicKeyLoader::load($key_type . ' ' . base64_encode($key_blob));
    Found base64_encode in file X509.php.
     chunk_split(base64_encode($key), 64) .
     chunk_split(base64_encode($key), 64) .
     chunk_split(base64_encode($key), 64) .
    Found base64_encode in file Fingerprint.php.
     $base = base64_encode($hash->hash($key));
    Found base64_encode in file OpenSSH.php.
     $RSAPublicKey = 'ssh-rsa ' . base64_encode($RSAPublicKey) . ' ' . $comment;
    Found base64_encode in file OpenSSH.php.
     $key = 'ssh-ed25519 ' . base64_encode($key) . ' ' . $comment;
     $key = 'ecdsa-sha2-' . $alias . ' ' . base64_encode($key) . ' ' . $comment;
    Found base64_encode in file PKCS1.php.
     chunk_split(base64_encode($params), 64) .
    Found base64_encode in file OpenSSH.php.
     $DSAPublicKey = 'ssh-dss ' . base64_encode($DSAPublicKey) . ' ' . $comment;
    Found base64_encode in file Client.php.
     . \base64_encode('$value[0]:$value[1]');
    Found base64_encode in file AppIdentityCredentials.php.
     return base64_encode(AppIdentityService::signForApp($stringToSign)['signature']);
    Found base64_encode in file Iam.php.
     'payload' => base64_encode($stringToSign),
    Found base64_encode in file ServiceAccountSignerTrait.php.
     return base64_encode($signedString);
    Found base64_encode in file MediaFileUpload.php.
     $related .= '\r\n' . base64_encode($this->data) . '\r\n';
    Found base64_encode in file JWK.php.
     \chunk_split(\base64_encode($rsaPublicKey), 64) .
    Found base64_encode in file JWT.php.
     return \str_replace('=', '', \strtr(\base64_encode($input), '+/', '-_'));
  8. Unwanted files : hidden file(s) or folder(s) .travis.yml .gitignore .github .php_cs.dist was found.
  9. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://www.youtube.com/embed/'.$youtubeid.'?feature=oembed" width="300" height="210" allowfullscreen style="overflow:hidden; border:none"> in file widget-youtube.php. 20: echo '<div class='video_container'><iframe src='https://www.youtube.com/embed/'.$youtubeid.'?feature=oembed' wFound <iframe width="730" height="360" src="<?php echo get_template_directory_uri(); ?>/admin/index.php" data-src="https://www.youtube.com/embed/<?php echo $datos_video['id']; ?> in file template-actions.php. 559: <iframe width='730' height='360' src='<?php echo get_template_directory_uri
  10. Malware : Operations on file system fopen was found in the file LoggerInterfaceTest.php 105: $closed = fopen('php://memory', 'r');116: 'resource' => fopen('php://memory', 'r'),fclose was found in the file LoggerInterfaceTest.php 106: fclose($closed);fopen was found in the file LoggerInterfaceTest.php 105: $closed = fopen('php://memory', 'r');116: 'resource' => fopen('php://memory', 'r'),fread was found in the file random.php 70: * 2. fread() /dev/urandom if available (never on Windows)fopen was found in the file random_bytes_dev_urandom.php 79: $fp = fopen('/dev/urandom', 'rb');fclose was found in the file random_bytes_dev_urandom.php 84: fclose($fp);fread was found in the file random_bytes_dev_urandom.php 142: * We use fread() in a loop to protect against partial reads148: $read = fread($fp, $remaining);fread was found in the file random_bytes_dev_urandom.php 142: * We use fread() in a loop to protect against partial reads148: $read = fread($fp, $remaining);fread was found in the file SlackHandler.php 158: @fread($res, 2048);fopen was found in the file DeduplicationHandler.php 139: $handle = fopen($this->deduplicationStore, 'rw+');fwrite was found in the file DeduplicationHandler.php 160: fwrite($handle, $log);fclose was found in the file DeduplicationHandler.php 164: fclose($handle);file_put_contents was found in the file DeduplicationHandler.php 171: file_put_contents($this->deduplicationStore, $record['datetime']->getTimestfile_get_contents was found in the file CouchDBHandler.php 61: if (false === @file_get_contents($url, false, $context)) {fclose was found in the file StreamHandler.php 65: fclose($this->stream);fopen was found in the file StreamHandler.php 103: $this->stream = fopen($this->url, 'a');139: $this->errorMessage = preg_replace('{^(fopen|mkdir)\(.*?\): }', '', $msg);fwrite was found in the file StreamHandler.php 134: fwrite($stream, (string) $record['formatted']);fwrite was found in the file ProcessHandler.php 177: fwrite($this->pipes[0], $string);fclose was found in the file ProcessHandler.php 187: fclose($pipe);fclose was found in the file SocketHandler.php 84: fclose($this->resource);fwrite was found in the file SocketHandler.php 251: protected function fwrite($data)253: return @fwrite($this->resource, $data);334: $chunk = $this->fwrite($data);336: $chunk = $this->fwrite(substr($data, $sent));fwrite was found in the file SocketHandler.php 251: protected function fwrite($data)253: return @fwrite($this->resource, $data);334: $chunk = $this->fwrite($data);336: $chunk = $this->fwrite(substr($data, $sent));fwrite was found in the file SocketHandler.php 251: protected function fwrite($data)253: return @fwrite($this->resource, $data);334: $chunk = $this->fwrite($data);336: $chunk = $this->fwrite(substr($data, $sent));fwrite was found in the file SocketHandler.php 251: protected function fwrite($data)253: return @fwrite($this->resource, $data);334: $chunk = $this->fwrite($data);336: $chunk = $this->fwrite(substr($data, $sent));fclose was found in the file SSH2.php 3079: fclose($this->realtime_log_file);4199: fclose($this->fsock);fopen was found in the file SSH2.php 4071: // PHP doesn't seem to like using constants in fopen()4073: $fp = fopen($filename, 'w');fopen was found in the file SSH2.php 4071: // PHP doesn't seem to like using constants in fopen()4073: $fp = fopen($filename, 'w');fclose was found in the file SSH2.php 3079: fclose($this->realtime_log_file);4199: fclose($this->fsock);fopen was found in the file SFTP.php 1931: $fp = fopen('php://memory', 'w+');1942: $fp = @fopen($data, 'rb');2143: $fp = fopen($local_file, 'wb');fopen was found in the file SFTP.php 1931: $fp = fopen('php://memory', 'w+');1942: $fp = @fopen($data, 'rb');2143: $fp = fopen($local_file, 'wb');fread was found in the file SFTP.php 1976: $temp = isset($fp) ? fread($fp, $sftp_packet_size) : substr($data, $sent, $sftp_packet_size);fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fopen was found in the file SFTP.php 1931: $fp = fopen('php://memory', 'w+');1942: $fp = @fopen($data, 'rb');2143: $fp = fopen($local_file, 'wb');fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fclose was found in the file SFTP.php 1986: fclose($fp);2008: fclose($fp);2021: fclose($fp);2152: $fclose_check = $local_file !== false && !is_callable($local_file) && !is_re2166: if ($fclose_check) {2167: fclose($fp);2215: if ($fclose_check) {2216: fclose($fp);2237: if ($fclose_check) {2238: fclose($fp);fopen was found in the file Stream.php 6: * Creates an sftp:// protocol handler that can be used with, for example, fopen(), dir(), etc.224: user_error('fopen(): failed to call user notifier', E_USER_WARNING);228: on which the fopen occurred as the line number - not the line that thefopen was found in the file Stream.php 6: * Creates an sftp:// protocol handler that can be used with, for example, fopen(), dir(), etc.224: user_error('fopen(): failed to call user notifier', E_USER_WARNING);228: on which the fopen occurred as the line number - not the line that thefread was found in the file Stream.php 387: * fseek, fputs / fwrite, fgets / fread and ftruncate.389: * Only fgets / fread, however, results in feof() returning true. do fputs($fp, 'aaa') on a390: * will return false. do fread($fp, 1) and feof() will then return true. do fseek($fp, 10) on ablank391: * will return false. do fread($fp, 1) and feof() will then return true.fread was found in the file Stream.php 387: * fseek, fputs / fwrite, fgets / fread and ftruncate.389: * Only fgets / fread, however, results in feof() returning true. do fputs($fp, 'aaa') on a390: * will return false. do fread($fp, 1) and feof() will then return true. do fseek($fp, 10) on ablank391: * will return false. do fread($fp, 1) and feof() will then return true.fwrite was found in the file Agent.php 283: if (strlen($this->socket_buffer) != fwrite($this->fsock, $this->socket_buffer)) {fread was found in the file ReadBytes.php 36: $temp = fread($this->fsock, $length);fread was found in the file X509.php 1170: $temp = fread($fsock, 1024);file_put_contents was found in the file Prime.php 660: file_put_contents('temp.txt', $str);fopen was found in the file Utils.php 74: $resource = \fopen('php://output', 'w');102: if (\ini_get('allow_url_fopen')) {107: throw new \RuntimeException('GuzzleHttp requires cURL, the allow_url_fopen ini setting, or a custom HTTP handler.');fopen was found in the file RequestOptions.php 79: * fopen() enable debug output with the HTTP handler used to send afwrite was found in the file MockHandler.php 126: \fwrite($sink, $contents);file_put_contents was found in the file MockHandler.php 128: \file_put_contents($sink, $contents);fopen was found in the file StreamHandler.php 144: $sink = $options['sink'] ?? \fopen('php://temp', 'r+');307: $resource = \fopen((string) $uri, 'r', false, $contextResource);fopen was found in the file StreamHandler.php 144: $sink = $options['sink'] ?? \fopen('php://temp', 'r+');307: $resource = \fopen((string) $uri, 'r', false, $contextResource);fwrite was found in the file StreamHandler.php 499: \fwrite($value, $args[$i] . ': '' . $v . '' ');501: \fwrite($value, '\n');fwrite was found in the file StreamHandler.php 499: \fwrite($value, $args[$i] . ': '' . $v . '' ');501: \fwrite($value, '\n');fopen was found in the file CurlFactory.php 396: $options['sink'] = \fopen('php://temp', 'w+');file_put_contents was found in the file FileCookieJar.php 68: if (false === \file_put_contents($filename, $jsonStr, \LOCK_EX)) {file_get_contents was found in the file FileCookieJar.php 84: $json = \file_get_contents($filename);fopen was found in the file Utils.php 299: $stream = fopen('php://temp', 'r+');327: return new Stream(fopen('php://temp', 'r+'), $options);340: * When fopen fails, PHP normally raises a warning. This function adds an350: Fopen($filename, $mode)362: $handle = fopen($filename, $mode);fwrite was found in the file Utils.php 301: fwrite($stream, $resource);fopen was found in the file Utils.php 299: $stream = fopen('php://temp', 'r+');327: return new Stream(fopen('php://temp', 'r+'), $options);340: * When fopen fails, PHP normally raises a warning. This function adds an350: Fopen($filename, $mode)362: $handle = fopen($filename, $mode);fopen was found in the file Utils.php 299: $stream = fopen('php://temp', 'r+');327: return new Stream(fopen('php://temp', 'r+'), $options);340: * When fopen fails, PHP normally raises a warning. This function adds an350: Fopen($filename, $mode)362: $handle = fopen($filename, $mode);fclose was found in the file Stream.php 108: fclose($this->stream);fread was found in the file Stream.php 228: $string = fread($this->stream, $length);fwrite was found in the file Stream.php 247: $result = fwrite($this->stream, $string);fopen was found in the file CachingStream.php 32: $this->stream = $target ?: new Stream(fopen('php://temp', 'r+'));fopen was found in the file StreamWrapper.php 43: return fopen('guzzle://stream', $mode, null, self::createStreamContext($stream));file_get_contents was found in the file ServiceAccountCredentials.php 113: $jsonKeyStream = file_get_contents($jsonKey);file_get_contents was found in the file UserRefreshCredentials.php 65: $jsonKeyStream = file_get_contents($jsonKey);file_get_contents was found in the file ServiceAccountJwtAccessCredentials.php 67: $jsonKeyStream = file_get_contents($jsonKey);file_get_contents was found in the file AccessToken.php 381: return json_decode(file_get_contents($url), true);file_get_contents was found in the file CredentialsLoader.php 96: $jsonKey = file_get_contents($path);124: $jsonKey = file_get_contents($path);file_get_contents was found in the file CredentialsLoader.php 96: $jsonKey = file_get_contents($path);124: $jsonKey = file_get_contents($path);file_get_contents was found in the file Verify.php 153: if (!$file = file_get_contents($url)) {file_get_contents was found in the file Client.php 963: $json = file_get_contents($config);file_get_contents was found in the file functions.php 763: file_get_contents( TEMPLATEPATH . '/style.min.css') );
  11. Malware : Network operations curl_init was found in the file ajax.php 96: $ch = curl_init('https://www.google.com/recaptcha/api/siteverify?secret='.$secretcurl_exec was found in the file ajax.php 99: $response = curl_exec($ch);curl_init was found in the file MandrillHandler.php 72: $ch = curl_init();curl_init was found in the file CubeHandler.php 95: $this->httpConnection = curl_init('http://'.$this->host.':'.$this->port.'/1.0/event/put');curl_init was found in the file LogglyHandler.php 89: $ch = curl_init();curl_init was found in the file IFTTTHandler.php 59: $ch = curl_init();curl_init was found in the file SendGridHandler.php 93: $ch = curl_init();curl_init was found in the file SlackWebhookHandler.php 98: $ch = curl_init();fsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().20: * @see http://php.net/manual/en/function.fsockopen.php102: * @see http://php.net/manual/en/function.fsockopen.php201: * UDP might appear to be connected but might fail when writing. See http://php.net/fsockopen for details.212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->220: protected function fsockopen()222: return @fsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->303: $resource = $this->pfsockopen();305: $resource = $this->fsockopen();pfsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this-303: $resource = $this->pfsockopen();pfsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this-303: $resource = $this->pfsockopen();pfsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this-303: $resource = $this->pfsockopen();fsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().20: * @see http://php.net/manual/en/function.fsockopen.php102: * @see http://php.net/manual/en/function.fsockopen.php201: * UDP might appear to be connected but might fail when writing. See http://php.net/fsockopen for details.212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->220: protected function fsockopen()222: return @fsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->303: $resource = $this->pfsockopen();305: $resource = $this->fsockopen();fsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().20: * @see http://php.net/manual/en/function.fsockopen.php102: * @see http://php.net/manual/en/function.fsockopen.php201: * UDP might appear to be connected but might fail when writing. See http://php.net/fsockopen for details.212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->220: protected function fsockopen()222: return @fsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->303: $resource = $this->pfsockopen();305: $resource = $this->fsockopen();pfsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this-303: $resource = $this->pfsockopen();fsockopen was found in the file SocketHandler.php 17: * Stores to any socket - uses fsockopen() or pfsockopen().20: * @see http://php.net/manual/en/function.fsockopen.php102: * @see http://php.net/manual/en/function.fsockopen.php201: * UDP might appear to be connected but might fail when writing. See http://php.net/fsockopen for details.212: protected function pfsockopen()214: return @pfsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->220: protected function fsockopen()222: return @fsockopen($this->connectionString, -1, $this->errno, $this->errstr, $this->303: $resource = $this->pfsockopen();305: $resource = $this->fsockopen();curl_exec was found in the file Util.php 39: * @return bool|string @see curl_exec44: $curlResponse = curl_exec($ch);curl_init was found in the file TelegramBotHandler.php 161: $ch = curl_init();fsockopen was found in the file SSH2.php 1216: // with fsockopen a timeout of 0 means that you instantly timeout1217: // to resolve this incompatibility a timeout of 100,000 will be used for fsockopen if timeout is 01218: $this->fsock = @fsockopen($this->host, $this->port, $errno, $errstr, $this->curTimeout == 0fsockopen was found in the file Agent.php 148: $this->fsock = fsockopen('unix://' . $address, 0, $errno, $errstr);fsockopen was found in the file X509.php 1150: $fsock = @fsockopen($parts['host'], isset($parts['port']) ? $parts['port'] : 80);curl_exec was found in the file CurlHandler.php 44: \curl_exec($easy->handle);curl_init was found in the file CurlFactory.php 69: $easy->handle = $this->handles ? \array_pop($this->handles) : \curl_init();curl_init was found in the file template-functions.php 277: $ch = curl_init();737: $ch = curl_init();1063: $ch = curl_init();curl_exec was found in the file template-functions.php 284: $content = curl_exec($ch);743: $contents = curl_exec($ch);1070: $contents = curl_exec($ch);curl_init was found in the file template-functions.php 277: $ch = curl_init();737: $ch = curl_init();1063: $ch = curl_init();curl_exec was found in the file template-functions.php 284: $content = curl_exec($ch);743: $contents = curl_exec($ch);1070: $contents = curl_exec($ch);curl_init was found in the file template-functions.php 277: $ch = curl_init();737: $ch = curl_init();1063: $ch = curl_init();curl_exec was found in the file template-functions.php 284: $content = curl_exec($ch);743: $contents = curl_exec($ch);1070: $contents = curl_exec($ch);
  12. Admin menu : Themes should use add_theme_page() for adding admin pages. File panel.php : 4: add_menu_page( 'Appyn', 'Appyn', 'manage_options', 'appyn_panel', 'appyn_seFile panel.php : 6: add_submenu_page( 'appyn_panel', 'Panel', 'Panel', 'manage_options', 'appyn7: add_submenu_page( 'appyn_panel', __( 'Documentación', 'appyn' ), __( 'Docu8: add_submenu_page( 'appyn_panel', 'Changelog', 'Changelog', 'manage_options'9: add_submenu_page( 'appyn_panel', __( 'Reportes', 'appyn' ), __( 'Reportes',27: add_submenu_page( 'appyn_importar_contenido_gp', __( 'Importar contenido (GFile panel.php : 6: add_submenu_page( 'appyn_panel', 'Panel', 'Panel', 'manage_options', 'appyn7: add_submenu_page( 'appyn_panel', __( 'Documentación', 'appyn' ), __( 'Docu8: add_submenu_page( 'appyn_panel', 'Changelog', 'Changelog', 'manage_options'9: add_submenu_page( 'appyn_panel', __( 'Reportes', 'appyn' ), __( 'Reportes',27: add_submenu_page( 'appyn_importar_contenido_gp', __( 'Importar contenido (GFile panel.php : 6: add_submenu_page( 'appyn_panel', 'Panel', 'Panel', 'manage_options', 'appyn7: add_submenu_page( 'appyn_panel', __( 'Documentación', 'appyn' ), __( 'Docu8: add_submenu_page( 'appyn_panel', 'Changelog', 'Changelog', 'manage_options'9: add_submenu_page( 'appyn_panel', __( 'Reportes', 'appyn' ), __( 'Reportes',27: add_submenu_page( 'appyn_importar_contenido_gp', __( 'Importar contenido (GFile panel.php : 6: add_submenu_page( 'appyn_panel', 'Panel', 'Panel', 'manage_options', 'appyn7: add_submenu_page( 'appyn_panel', __( 'Documentación', 'appyn' ), __( 'Docu8: add_submenu_page( 'appyn_panel', 'Changelog', 'Changelog', 'manage_options'9: add_submenu_page( 'appyn_panel', __( 'Reportes', 'appyn' ), __( 'Reportes',27: add_submenu_page( 'appyn_importar_contenido_gp', __( 'Importar contenido (GFile panel.php : 6: add_submenu_page( 'appyn_panel', 'Panel', 'Panel', 'manage_options', 'appyn7: add_submenu_page( 'appyn_panel', __( 'Documentación', 'appyn' ), __( 'Docu8: add_submenu_page( 'appyn_panel', 'Changelog', 'Changelog', 'manage_options'9: add_submenu_page( 'appyn_panel', __( 'Reportes', 'appyn' ), __( 'Reportes',27: add_submenu_page( 'appyn_importar_contenido_gp', __( 'Importar contenido (G
  13. Inapropriate constants : Use of TEMPLATEPATH Constant TEMPLATEPATH was found in the file functions.php. get_template_directory() should be used instead. 732: require_once( TEMPLATEPATH . '/includes/template-functions.php' );733: require_once( TEMPLATEPATH . '/includes/template-actions.php' );734: require_once( TEMPLATEPATH . '/includes/template-tags.php' );735: require_once( TEMPLATEPATH . '/includes/admin.php' );736: require_once( TEMPLATEPATH . '/includes/ajax.php' );737: require_once( TEMPLATEPATH . '/includes/widget-ultimos-posts.php' );738: require_once( TEMPLATEPATH . '/includes/widget-mejor-calificados.php' );739: require_once( TEMPLATEPATH . '/includes/widget-mas-vistos.php' );740: require_once( TEMPLATEPATH . '/includes/widget-facebook.php' );741: require_once( TEMPLATEPATH . '/includes/widget-twitter.php' );742: require_once( TEMPLATEPATH . '/includes/widget-youtube.php' );743: require_once( TEMPLATEPATH . '/includes/widget-ultimos-posts-blog.php' );744: require_once( TEMPLATEPATH . '/includes/widget-mas-vistos-blog.php' );745: require_once( TEMPLATEPATH . '/includes/widget-mas-calificados.php' );763: file_get_contents( TEMPLATEPATH . '/style.min.css') );
  14. Content width : Proper definition of content_width No content width has been defined. Example:
    if ( ! isset( $content_width ) ) $content_width = 900;
  15. Deprecated functions : like_escape like_escape found in file functions.php. Deprecated since version 4.0. Use wpdb::esc_like() instead.280: $where .= ' AND ' . $wpdb->posts . '.post_title LIKE \'%' . esc_sql( like_escape( $wpse18703_title ) ) . '%\'';
  16. Deprecated functions : get_bloginfo get_bloginfo('url') was found in the file header.php. Use home_url() instead.8: <link rel='canonical' href='<?php echo get_bloginfo('url').strtok($_SERVER['REQUEST_URI'], '?'); ?>'>get_bloginfo('template_url') was found in the file header.php. Use get_template_directory_uri() instead.35: $favicon = ( !empty($favicon) ) ? $favicon: get_bloginfo('template_url').'/images/favicon.ico';38: $logo = ( !empty($logo) ) ? $logo: get_bloginfo('template_url').'/images/logo.png';get_bloginfo('url') was found in the file eps_publish.php. Use home_url() instead.40: 'website' => get_bloginfo('url'),get_bloginfo('template_url') was found in the file panel.php. Use get_template_directory_uri() instead.4: add_menu_page( 'Appyn', 'Appyn', 'manage_options', 'appyn_panel', 'appyn_settings', get_bloginfo('template_url').'/images/ico-panel.png', 81 );661: <input type='text' name='logo' id='logo' value='<?php $logo = get_option( 'appyn_logo' ); echo (!empty($logo)) ? $logo : get_bloginfo('template_url').'/images/logo.png'; ?>' class='regular-text up672: <input type='text' name='favicon' id='favicon' value='<?php $favicon = get_option( 'appyn_favicon' ); echo (!empty($favicon)) ? $favicon : get_bloginfo('template_url').'/images/favicon.ico'; ?>' class='regular-textget_bloginfo('template_url') was found in the file header-default.php. Use get_template_directory_uri() instead.21: $logo = ( !empty($logo) ) ? $logo: get_bloginfo('template_url').'/images/logo.png';get_bloginfo("template_directory") was found in the file admin.php. Use get_template_directory_uri() instead.8: wp_enqueue_style( 'style-admin', get_bloginfo('template_directory').'/admin/assets/css/style.css', false, VEget_bloginfo('template_url') was found in the file admin.php. Use get_template_directory_uri() instead.29: wp_register_script( 'custom-upload', get_bloginfo('template_url').'/admin/assets/js/upload.js',array('jquery','mget_bloginfo("template_directory") was found in the file functions.php. Use get_template_directory_uri() instead.1119: wp_enqueue_style( 'style', get_bloginfo('template_directory').'/style.min.css', false, VERSIONPX, 'allget_bloginfo('template_url') was found in the file functions.php. Use get_template_directory_uri() instead.60: $url = get_bloginfo('template_url');753: $favicon = ( !empty($favicon) ) ? $favicon: get_bloginfo('template_url').'/images/favicon.ico';
  17. Deprecated functions : bloginfo bloginfo('url') was found in the file 404.php. Use echo esc_url( home_url() ) instead.6: <form action='<?php bloginfo('url'); ?>'>bloginfo('url') was found in the file header.php. Use echo esc_url( home_url() ) instead.8: <link rel='canonical' href='<?php echo get_bloginfo('url').strtok($_SERVER['REQUEST_URI'], '?'); ?>'>75: <a href='<?php bloginfo('url'); ?>'><?php echo px_amp_logo( $logo ); ?></a>85: <form action='<?php bloginfo('url'); ?>' method='get' target='_top'>bloginfo('url') was found in the file single-blog.php. Use echo esc_url( home_url() ) instead.7: <li><a href='<?php bloginfo('url'); ?>'>Home</a> /</li>8: <li><a href='<?php bloginfo('url'); ?>/blog/'>Blog</a></li>bloginfo('url') was found in the file header-default.php. Use echo esc_url( home_url() ) instead.19: <a href='<?php bloginfo('url'); ?>'><?phpbloginfo('url') was found in the file page.php. Use echo esc_url( home_url() ) instead.7: <a href='<?php bloginfo('url'); ?>'>Home</a> /bloginfo('url') was found in the file template-tags.php. Use echo esc_url( home_url() ) instead.10: <li><a href='<?php bloginfo('url'); ?>' title='<?php echo bloginfo('title'); ?>'>Home</a> <?phbloginfo("url") was found in the file template-actions.php. Use echo esc_url( home_url() ) instead.19: <form action='<?php bloginfo('url'); ?>'>31: <form action='<?php bloginfo('url'); ?>'>bloginfo('url') was found in the file functions.php. Use echo esc_url( home_url() ) instead.640: <p><a href='<?php bloginfo('url'); ?>/wp-admin/admin.php?page=appyn_documentation#links-downl1388: echo '<link rel='amphtml' href=''.get_bloginfo('url').'/?amp'>';
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'menu' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'menu movil' in file functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'menu footer' in file functions.php.
  3. Cdn : Use of CDNFound the URL of a CDN in the code: maxcdn.bootstrapcdn.com/font-awesome. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  5. Unwanted directories : GIT revision control directoryA.git was found.
  6. Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file archive.php.
  7. Fundamental theme elements : Presence of add_theme_support()Could not find add_theme_support( 'automatic-feed-links' ).
  8. Fundamental theme elements : Presence of wp_link_pages()Could not find wp_link_pages.
  9. Fundamental theme elements : Presence of post_class()Could not find post_class.
  10. Comment reply : Declaration of comment replyCould not find the comment-reply script enqueued, however a reference to 'comment-reply' was found. Make sure that the comment-reply js script is being enqueued properly on singular pages.
  11. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  12. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  13. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  14. CSS files : Presence of license urlLicense URI: is missing from style.css header.
  15. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  16. CSS files : Presence of .sticky class.sticky css class is needed in theme css.
  17. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  18. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  19. Screenshot : Screenshot fileScreenshot dimensions are wrong! Detected: 700x600px (7:6). Ratio of width to height should be 4:3.Screenshot size is 700x600px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  7. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : header.php 12: include (__DIR__.'/style.min.css'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : eps_publish.php 5: require('../../../../wp-load.php');98: require_once( ABSPATH . '/wp-admin/includes/taxonomy.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : eps_update.php 5: require('../../../../wp-load.php');98: require_once( ABSPATH . '/wp-admin/includes/taxonomy.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : SSH2.php 11: * include 'vendor/autoload.php';25: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : SFTP.php 17: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Agent.php 13: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : RC4.php 21: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : DSA.php 11: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : DES.php 19: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Rijndael.php 31: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Blowfish.php 17: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : TripleDES.php 13: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Twofish.php 17: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : RSA.php 11: * include 'vendor/autoload.php';27: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Random.php 11: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : RC2.php 17: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : EC.php 11: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : AES.php 12: * to save one include_once().26: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : DH.php 11: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Hash.php 14: * include 'vendor/autoload.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : template-functions.php 894: require_once(ABSPATH . 'wp-admin/includes/image.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes