Validation results

Constructo

7 WARNINGS

Constructo

WordPress 6.7 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.7
FILE NAMEconstructo.zip
FILE SIZE4991031 bytes
MD5857c83621d44357e7b5834d86b17c94f
SHA1a5155274f6fd688b5ee202b00f22a9ed97d1b510
LICENSEGNU GPL 2
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
VERSION4.0.7
TAGSone-column, two-columns, three-columns, four-columns, left-sidebar, left-sidebar, custom-colors, custom-header, custom-menu, theme-options, translation-ready, threaded-comments
CREATION DATE2019-07-30
LAST FILE UPDATE2020-08-02
LAST VALIDATION2020-08-02 14:08
OTHER VERSIONS
4.0.6 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Security breaches : Use of base64_decode() Found base64_decode in file vc_shortcodes_map.php. 1016: if( base64_encode(base64_decode($info)) === $info ) {1017: $info = base64_decode($info);

Security breaches : Use of base64_encode() Found base64_encode in file TwitterAPIExchange.php.

 $oauth_signature = base64_encode(hash_hmac('sha1', $base_info, $composite_key, true));

Found base64_encode in file vc_shortcodes_map.php.

 if( base64_encode(base64_decode($info)) === $info ) {

Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://player.vimeo.com/video/' . $content . '" width="320" height="240" style="border: none !important"> in file shortcodes.php. 1431: return '<div class='video-wrapper'><iframe src='https://player.vimeo.com/video/' . $content . '' width='320' h
Malware : Operations on file system file_get_contents was found in the file parsers.php 250: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 396: $fp = $this->fopen( $file, 'r' );622: function fopen( $filename, $mode = 'r' ) {625: return fopen( $filename, $mode );fclose was found in the file parsers.php 445: $this->fclose($fp);640: function fclose( $fp ) {643: return fclose( $fp );fopen was found in the file parsers.php 396: $fp = $this->fopen( $file, 'r' );622: function fopen( $filename, $mode = 'r' ) {625: return fopen( $filename, $mode );fopen was found in the file parsers.php 396: $fp = $this->fopen( $file, 'r' );622: function fopen( $filename, $mode = 'r' ) {625: return fopen( $filename, $mode );fclose was found in the file parsers.php 445: $this->fclose($fp);640: function fclose( $fp ) {643: return fclose( $fp );fclose was found in the file parsers.php 445: $this->fclose($fp);640: function fclose( $fp ) {643: return fclose( $fp );file_get_contents was found in the file AnpsText.php 164: <span class='fa' <?php echo esc_attr($icon);?>'<?php if($icon_color!=''):?> style='color: <?php echo esc_attr($icon_color);?>'<?php endif; ?>><?php echo file_get_contents(get_template_directory_uri() . '/images/construction-iconfile_get_contents was found in the file AnpsSocial.php 297: <span class='fa'><?php echo file_get_contents(get_template_directory_uri() . '/images/construction-icon
Malware : Network operations curl_init was found in the file TwitterAPIExchange.php 212: $feed = curl_init();curl_exec was found in the file TwitterAPIExchange.php 214: $json = curl_exec($feed);
Inapropriate constants : Use of HEADER_IMAGE Constant HEADER_IMAGE' was found in the file helpers.php. add_theme_support( 'custom-header' ) should be used instead. 1344: define('HEADER_IMAGE', '%s/images/headers/path.jpg');
Inapropriate constants : Use of NO_HEADER_TEXT Constant NO_HEADER_TEXT' was found in the file helpers.php. add_theme_support( 'custom-header' ) should be used instead. 1354: define('NO_HEADER_TEXT', true);
Inapropriate constants : Use of HEADER_TEXTCOLOR Constant HEADER_TEXTCOLOR' was found in the file helpers.php. add_theme_support( 'custom-header' ) should be used instead. 1342: define('HEADER_TEXTCOLOR', '');
Inapropriate constants : Use of HEADER_IMAGE_WIDTH Constant HEADER_IMAGE_WIDTH' was found in the file helpers.php. add_theme_support( 'custom-header' ) should be used instead. 1347: define('HEADER_IMAGE_WIDTH', apply_filters('widebox_header_image_width', 190));
Inapropriate constants : Use of HEADER_IMAGE_HEIGHT Constant HEADER_IMAGE_HEIGHT' was found in the file helpers.php. add_theme_support( 'custom-header' ) should be used instead. 1348: define('HEADER_IMAGE_HEIGHT', apply_filters('widebox_header_image_height', 54));
Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.714: $headers = wp_get_http( $url, $upload['file'] );
Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was main-slider.zip content-slider.zip.

Warning

Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file cart-totals.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file cart-totals.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file shipping-calculator.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are constructo, woocommerce, wordpress-importer, tgmpa, js_composer.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file wp_backend.js.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
I18N implementation : Proper use of ___all(Possible variable $cvalue found in translation function in shipping-calculator.php. Translation function calls should not contain PHP variables.
Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or requireThe theme appears to use include or require : mail.php 2: require_once('../../../../wp-load.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Style.php 2: include_once 'Framework.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : AnpsImport.php 2: include_once(get_template_directory() . '/anps-framework/classes/Framework. If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Contact.php 2: include_once 'Framework.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Options.php 2: include_once 'Framework.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Dummy.php 2: include_once(get_template_directory() . '/anps-framework/classes/Framework.10: include_once(get_template_directory() . '/anps-framework/classes/AnpsImport If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Customizer.php 5: include_once 'customizer_controls/anps_divider_control.php';6: include_once 'customizer_controls/anps_desc_control.php';7: include_once 'customizer_controls/anps_sidebar_control.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : shortcodes.php 1587: include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : import_export_view.php 2: include_once(get_template_directory() . '/anps-framework/classes/AnpsImport If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : import_export_widgets_view.php 2: include_once(get_template_directory() . '/anps-framework/classes/AnpsImport If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : helpers.php 1172: include_once 'sidebar_generator.php';1327: require_once( $locale_file );1400: 1649: include('custom_styles.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : admin_view.php 35: case 'options': include_once 'views/options_page_view.php'; break;36: case 'options_page': include_once 'views/options_page_view.php'; break;37: case 'options_page_setup': include_once 'views/options_page_setup_view.php'; break;38: case 'header_options': include_once 'views/header_options_view.php'; break;39: case 'footer_options': include_once 'views/footer_options_view.php'; break;40: case 'options_media': include_once 'views/options_media_view.php'; break;41: case 'google_maps': include_once 'views/google_maps_view.php'; break;42: case 'dummy_content': include_once 'views/dummy_view.php'; break;43: case 'theme_upgrade': include_once 'views/theme_upgrade_view.php'; break;44: case 'theme_style_google_font': include_once 'views/update_google_font_view.php'; break;45: case 'theme_style_custom_font': include_once 'views/update_custom_font_view.php'; break;46: case 'theme_style_custom_css': include_once 'views/custom_css_view.php'; break;47: case 'import_export': include_once 'views/import_export_view.php'; break;48: case 'import_export_widgets': include_once 'views/import_export_widgets_view.php'; break;49: case 'system_req': include_once 'views/system_req_view.php'; break;50: case 'woocommerce': include_once 'views/woocommerce_view.php'; break;51: default: include_once 'views/style_view.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.7 theme

VIEW ALL THEMES