0
Validation results

DavinciWoo

DavinciWoo

WordPress 6.6.1 theme
0
  • THEME TYPEWordPress theme 6.6.1
  • FILE NAMEdavinciwoo.1.3.2.zip
  • FILE SIZE3117474 bytes
  • MD5493e3333bc65014e72939604b1bf4f4d
  • SHA195076d413104159ba53b0465bb930e16c70b658e
  • LICENSENone
  • FILES INCLUDEDCSS, PHP, Bitmap images
  • THEME URIhttps://alidropship.com/
  • VERSION1.3.2
  • AUTHOR URI
  • CREATION DATE2021-05-13
  • LAST FILE UPDATE2021-05-13
  • LAST VALIDATION2021-05-13 14:35
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file adsMedia.php. 167: return base64_decode( $data );Found base64_decode in file blog-functions.php. 120: $args = unserialize( base64_decode(stripslashes( $_POST['query'] ) ) );
  2. Security breaches : Use of base64_encode() Found base64_encode in file blog-init.php.
     'posts' => base64_encode( serialize( $wp_query->query_vars ) ),
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" height="330px" src="<?=$video_embed?>" data-src="<?=$video_embed?> in file single-product-gallery-video.php. 21: <iframe width='100%' height='330px' src='<?=$video_embed?>' data-src='<?=$v
  4. Malware : Operations on file system file_put_contents was found in the file adsSetup.php 1292: file_put_contents( $new_theme_path.'/style.css', $css );fopen was found in the file adsMedia.php 100: $savefile = @fopen( $uploadfile, 'w' );fwrite was found in the file adsMedia.php 104: fwrite( $savefile, $contents );fclose was found in the file adsMedia.php 105: fclose( $savefile );file_get_contents was found in the file adsMedia.php 164: return $this->file_get_contents( $data );170: private function file_get_contents( $file ){file_get_contents was found in the file adsMedia.php 164: return $this->file_get_contents( $data );170: private function file_get_contents( $file ){file_get_contents was found in the file structure-wc-global.php 140: $upload = wp_upload_bits( $file, null, file_get_contents( $_FILES['comment_image']['tmp_name'][$key] ) );
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php : 730: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_tFile kit-init.php : 13: add_menu_page(File kit-init.php : 24: add_submenu_page(
  6. Deprecated functions : get_bloginfo get_bloginfo('url') was found in the file function-update.php. Use home_url() instead.126: 'api-key' => md5(get_bloginfo('url'))128: 'user-agent' => 'WordPress/' . $wp_version . '; ' . get_bloginfo('url')
  7. Deprecated functions : bloginfo bloginfo('url') was found in the file product-page-default-shipping-content.php. Use echo esc_url( home_url() ) instead.77: <li><?php _e( 'Other exceptional circumstances outside the control of', 'davinciwoo'); ?> <a class='q' href='<?php bloginfo('url'); ?>'><?php echo adswth_get_site_domain(); ?></a></li>79: <p><i>*<?php _e( 'You can submit refund requests within 15 days after the guaranteed period for delivery (45 days) has expired. You can do it by sending a message on', 'davinciwoo' ); ?> <a href='<?php bloginfo('url'); ?>/contact-us/'><?php _e( 'page', 'davinciwoo'); ?></a>.</
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file function-demo.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file function-demo.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Tag Archives: %s', davinciwoo, '' in file structure-breadcrumbs.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are davinciwoo, tgmpa, wordpress-importer, dav2, kirki, textdomain, woocommerce, yith-woocommerce-wishlist, davincwoo.
  3. Cdn : Use of CDNFound the URL of a CDN in the code: html5shiv.googlecode.com/svn/trunk/html5.js. CSS or Javascript resources should not be loaded from a CDN. These resources should be bundled with the theme.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. PHP short tags : Presence of PHP short tagsPHP short tags were found in file product-image-vertical.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.36: <div class='col-12 <?php echo !empty( $attachment_ids ) && count($attachment_ids) > 0 ? 'col-PHP short tags were found in file variation-add-to-cart-button.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.39: class='single_add_to_cart_button btn btn-primary btn-big alt <?=(adswth_option( 'show_side_shoppingcart_after_product_add' ) && adswth_oPHP short tags were found in file simple.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.63: class='single_add_to_cart_button btn btn-primary btn-big alt <?=(adswth_option( 'show_side_shoppingcart_after_product_add' ) && adswth_oPHP short tags were found in file product.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.8: <div class='product-main<?=adswth_option( 'add_to_cart_button_sticky' ) ? ' sticky-add-to-cart-buttPHP short tags were found in file success.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.29: <div class='woocommerce-message<?=(adswth_option( 'show_side_shoppingcart_after_product_add' ) && adswth_oPHP short tags were found in file single-product-gallery-video.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.19: <div data-thumb='<?php echo $thumbnail ?>' class='woocommerce-product-gallery__image swiper-slide alids-woo-product-video <?=$video_type ? 'video-type-' . $video_type : ''?>'>21: <iframe width='100%' height='330px' src='<?=$video_embed?>' data-src='<?=$video_embed?>' frameborder='0' allowfullsc23: <iframe width='100%' height='330px' src='<?=$video_embed?>' data-src='<?=$video_embed?>' frameborder='0' allowfullsc25: <video width='100%' height='100%' poster='<?=esc_url($thumbnail)?>' controls='controls' disablePictureInPicture contr29: <img src='<?=esc_url($thumbnail)?>' />PHP short tags were found in file single-product-gallery-video-thumbnail.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.19: <img src='<?=$thumbnail?>' class='attachment-woocommerce_thumbnail' />
  6. Admin menu : Detection of user levels deprecated in WordPress 2.0. See Wordpress codex.File Ads.php : 17: if( current_user_can( 'level_9' ) )File function-update.php : 14: if( ! current_user_can('level_9') ) return null;23: if( ! current_user_can('level_9') || ! isset( $_POST['WPLANG'] ) )
  7. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file davinciwoo-sm.min.css.
  8. Fundamental theme elements : Presence of wp_link_pages()Could not find wp_link_pages.
  9. Fundamental theme elements : Presence of post_class()Could not find post_class.
  10. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  11. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  12. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  13. CSS files : Presence of license urlLicense URI: is missing from style.css header.
  14. CSS files : Presence of .bypostauthor class.bypostauthor css class is needed in theme css.
  15. CSS files : Presence of .wp-caption class.wp-caption css class is needed in theme css.
  16. CSS files : Presence of .wp-caption-text class.wp-caption-text css class is needed in theme css.
  17. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  18. Tags : Tags displayThis theme doesn't seem to display tags.
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in function-global.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  5. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  6. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : adsTemplate.php 126: require_once( $path ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : adsSetup.php 261: require_once( ABSPATH . 'wp-admin/includes/file.php' );286: require_once( ABSPATH . 'wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : adsMedia.php 138: include( ABSPATH . 'wp-admin/includes/image.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : function-global.php 16: include( $file );75: include( $file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : admin-init.php 12: include_once( ADSW_THEME_PATH . '/include/admin/customizer/customizer-reset If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : controller.php 78: require( ADSW_THEME_PATH . '/include/admin/fields/page-about-us.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : kit-init.php 223: require( ADSW_THEME_PATH . '/include/admin/settings/general.php' );236: require( ADSW_THEME_PATH . '/include/admin/settings/woocommerce.php' );256: require( ADSW_THEME_PATH . '/include/admin/settings/service-pages.php' );269: require( ADSW_THEME_PATH . '/include/admin/settings/additional.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options-header.php 9: include_once( dirname( __FILE__ ) . '/options-header-logo.php' );10: include_once( dirname( __FILE__ ) . '/options-header-top.php' );11: include_once( dirname( __FILE__ ) . '/options-header-account.php' );12: include_once( dirname( __FILE__ ) . '/options-header-contact.php' );13: include_once( dirname( __FILE__ ) . '/options-header-sticky.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options-css.php 7: include_once( dirname( __FILE__ ) . '/options-colors.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options-page-front.php 9: include_once( dirname( __FILE__ ) . '/options-page-front-slider.php' );10: include_once( dirname( __FILE__ ) . '/options-page-front-countdown.php' );11: include_once( dirname( __FILE__ ) . '/options-page-front-features.php' );12: include_once( dirname( __FILE__ ) . '/options-page-front-products.php' );13: include_once( dirname( __FILE__ ) . '/options-page-front-promotion.php' );14: include_once( dirname( __FILE__ ) . '/options-page-front-subscribe.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options-shop.php 13: include_once( dirname( __FILE__ ).'/options-shop-product-settings.php' );14: include_once( dirname( __FILE__ ).'/options-shop-product-page.php' );15: include_once( dirname( __FILE__ ).'/options-shop-view.php' );16: include_once( dirname( __FILE__ ).'/options-shop-product-catalog-mobile.php If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options-blog.php 11: include_once( dirname( __FILE__ ) . '/options-blog-header.php' );12: include_once( dirname( __FILE__ ) . '/options-blog-banner.php' );13: include_once( dirname( __FILE__ ) . '/options-blog-subscribe.php' );14: include_once( dirname( __FILE__ ) . '/options-blog-footer.php' );15: include_once( dirname( __FILE__ ) . '/options-blog-style.php' );16: include_once( dirname( __FILE__ ) . '/options-blog-heading.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : structure-wc-global.php 162: require_once(ABSPATH . 'wp-admin/includes/image.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : init.php 29: require( $file );61: include_once( ADSW_THEME_PATH . '/include/admin/kirki/kirki.php' );84: include_once( ADSW_THEME_PATH . '/include/admin/customizer/customizer-confi87: include_once( ADSW_THEME_PATH .'/include/admin/options/helpers/options-help90: //include_once( ADSW_THEME_PATH . '/include/admin/options/global/options-gene91: include_once( ADSW_THEME_PATH . '/include/admin/options/styles/options-css.92: include_once( ADSW_THEME_PATH . '/include/admin/options/header/options-head93: include_once( ADSW_THEME_PATH . '/include/admin/options/page-front/options-94: include_once( ADSW_THEME_PATH . '/include/admin/options/footer/options-foot97: include_once( ADSW_THEME_PATH . '/include/admin/options/blog/options-blog.p102: include_once( ADSW_THEME_PATH .'/include/admin/options/shop/options-shop.ph If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog-functions.php 161: include( $file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes