Validation results

Elos Wordpress Theme

13 WARNINGS

Elos Wordpress Theme

WordPress 6.7 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.7
FILE NAMEelos.zip
FILE SIZE11707291 bytes
MD554212373abfb23b097984dee2e7c9a21
SHA1c1d09a134b9d90389a6673a3c1adab792236fb7d
LICENSEGNU GPL 2
FILES INCLUDEDCSS, PHP, HTML, XML, Bitmap images, Adobe Illustrator
VERSION1.3
CREATION DATE2020-07-31
LAST FILE UPDATE2020-07-31
LAST VALIDATION2020-07-31 21:15

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
Security breaches : Use of PHP sytem calls Found shell_exec in file tmhUtilities.php. 235: $style = shell_exec('stty -g');238: shell_exec('stty -echo');241: shell_exec('stty -icanon -echo min 1 time 0');260: shell_exec('stty ' . $style);
Security breaches : Modification of PHP server settings Found ini_set in file importer.php. 8: @ini_set('max_execution_time', 600); //execution time increased to 10 minuteFound ini_set in file freshizer.php. 1513: @ini_set( 'memory_limit', '256M' );
Security breaches : Use of base64_encode() Found base64_encode in file tmhOAuth.php.
```
 base64_encode(
```
Found base64_encode in file TwitterAPIExchange.php.
```
 $oauth_signature = base64_encode(hash_hmac('sha1', $base_info, $composite_key, true));
```
Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="http://player.vimeo.com/video/'.$matches[0].'?title=0&byline=0&portrait=0&color=ffffff"> in file framework.php. 482: return '<iframe src='http://player.vimeo.com/video/'.$matches[0].'?title=0&byli
Malware : Operations on file system file_get_contents was found in the file importer.php 233: $theme_options = file_get_contents( $theme_options_file );243: $widget_data_json = file_get_contents( $widget_data_file );464: $content = @file_get_contents($filepath);805: $json = file_get_contents($file);file_get_contents was found in the file importer.php 233: $theme_options = file_get_contents( $theme_options_file );243: $widget_data_json = file_get_contents( $widget_data_file );464: $content = @file_get_contents($filepath);805: $json = file_get_contents($file);fread was found in the file importer.php 450: while (!feof($slider_export)) $content .= fread($slider_export, 1024);451: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }452: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }453: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }fread was found in the file importer.php 450: while (!feof($slider_export)) $content .= fread($slider_export, 1024);451: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }452: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }453: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }fread was found in the file importer.php 450: while (!feof($slider_export)) $content .= fread($slider_export, 1024);451: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }452: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }453: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }fread was found in the file importer.php 450: while (!feof($slider_export)) $content .= fread($slider_export, 1024);451: if($custom_animations){ while (!feof($custom_animations)) $animations .= fread($custom_animations, 1024); }452: if($dynamic_captions){ while (!feof($dynamic_captions)) $dynamic .= fread($dynamic_captions, 1024); }453: if($static_captions){ while (!feof($static_captions)) $static .= fread($static_captions, 1024); }fclose was found in the file importer.php 455: fclose($slider_export);456: if($custom_animations){ fclose($custom_animations); }457: if($dynamic_captions){ fclose($dynamic_captions); }458: if($static_captions){ fclose($static_captions); }fclose was found in the file importer.php 455: fclose($slider_export);456: if($custom_animations){ fclose($custom_animations); }457: if($dynamic_captions){ fclose($dynamic_captions); }458: if($static_captions){ fclose($static_captions); }fclose was found in the file importer.php 455: fclose($slider_export);456: if($custom_animations){ fclose($custom_animations); }457: if($dynamic_captions){ fclose($dynamic_captions); }458: if($static_captions){ fclose($static_captions); }fclose was found in the file importer.php 455: fclose($slider_export);456: if($custom_animations){ fclose($custom_animations); }457: if($dynamic_captions){ fclose($dynamic_captions); }458: if($static_captions){ fclose($static_captions); }file_get_contents was found in the file importer.php 233: $theme_options = file_get_contents( $theme_options_file );243: $widget_data_json = file_get_contents( $widget_data_file );464: $content = @file_get_contents($filepath);805: $json = file_get_contents($file);file_get_contents was found in the file importer.php 233: $theme_options = file_get_contents( $theme_options_file );243: $widget_data_json = file_get_contents( $widget_data_file );464: $content = @file_get_contents($filepath);805: $json = file_get_contents($file);file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fopen was found in the file parsers.php 415: $fp = $this->fopen( $file, 'r' );641: function fopen( $filename, $mode = 'r' ) {644: return fopen( $filename, $mode );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );fclose was found in the file parsers.php 464: $this->fclose($fp);659: function fclose( $fp ) {662: return fclose( $fp );fread was found in the file freshizer.php 65: return (fread( $this->getHandle(), $this->getFileSize() ));368: $fileContent .= fread($handle, 8192);fwrite was found in the file freshizer.php 82: fwrite( $this->getHandle(), ( $content ) );fclose was found in the file freshizer.php 111: fclose( $this->getHandle() );370: fclose( $handle );fopen was found in the file freshizer.php 276: $fileHandler = fopen( $path, $mode);319: if( ini_get('allow_url_fopen') ) {320: Fopen() );361: Fopen implements blIConnection {364: $handle = fopen( $url, 'rb' );fopen was found in the file freshizer.php 276: $fileHandler = fopen( $path, $mode);319: if( ini_get('allow_url_fopen') ) {320: Fopen() );361: Fopen implements blIConnection {364: $handle = fopen( $url, 'rb' );fread was found in the file freshizer.php 65: return (fread( $this->getHandle(), $this->getFileSize() ));368: $fileContent .= fread($handle, 8192);fclose was found in the file freshizer.php 111: fclose( $this->getHandle() );370: fclose( $handle );fopen was found in the file tmhUtilities.php 219: $handle = fopen('php://stdin','r');fwrite was found in the file tmhUtilities.php 249: fwrite(STDOUT, '\x08 \x08');253: fwrite(STDOUT, '*');fwrite was found in the file tmhUtilities.php 249: fwrite(STDOUT, '\x08 \x08');253: fwrite(STDOUT, '*');file_get_contents was found in the file framework.php 1284: $subject = file_get_contents(get_template_directory().'/css/font-awesome/css/font-awes1299: $subject = file_get_contents(get_template_directory().'/css/icomoon/css/icomoon.css');file_get_contents was found in the file framework.php 1284: $subject = file_get_contents(get_template_directory().'/css/font-awesome/css/font-awes1299: $subject = file_get_contents(get_template_directory().'/css/icomoon/css/icomoon.css');file_get_contents was found in the file theme-options.php 1907: $google_fonts = file_get_contents(get_template_directory() . '/framework/fonts/google-fonts
Malware : Network operations curl_init was found in the file tmhOAuth.php 635: $c = curl_init();curl_exec was found in the file tmhOAuth.php 703: $response = curl_exec($c);curl_init was found in the file freshizer.php 321: } else if( function_exists( 'curl_init') ) {348: $ch = curl_init();curl_exec was found in the file freshizer.php 353: $data = curl_exec($ch);curl_init was found in the file TwitterAPIExchange.php 214: $feed = curl_init();curl_exec was found in the file TwitterAPIExchange.php 216: $json = curl_exec($feed);
Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php : 370: add_submenu_page( $args['parent_slug'], $args['page_title'], $args['menu_tiFile ot-settings-api.php : 90: $theme_check_bs = 'add_menu_page';File ot-settings-api.php : 91: $theme_check_bs2 = 'add_submenu_page';
Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1032: screen_icon();screen_icon found in file class-tgm-plugin-activation.php. Deprecated since version 3.8.403: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); 1599: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); screen_icon found in file ot-settings-api.php. Deprecated since version 3.8.249: screen_icon( ( isset( $page['screen_icon'] ) ? $page['screen_icon'] : 'opti
Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.905: $headers = wp_get_http( $url, $upload['file'] );
Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was js_composer.zip image-parallax-for-vc.zip masterslider.zip ._image-parallax-for-vc.zip ._masterslider.zip ._js_composer.zip.

Warning

theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is elos-wordpress-theme.
Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Required Plugins' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Install Plugins' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Installing Plugin: %s' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Something went wrong with the plugin API.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Return to Required Plugins Installer' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Plugin activated successfully.' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'All plugins installed and activated successfully. %s' in file plugins-activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments ' not found!<br>' in file importer.php.Found a translation function that is missing a text-domain. Function __, with the arguments ' not found!<br>' in file importer.php.Found a translation function that is missing a text-domain. Function __, with the arguments ' not found!<br>' in file importer.php.Found a translation function that is missing a text-domain. Function __, with the arguments ' not found!<br>' in file importer.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'This is a demo Textarea field.' in file demo-meta-boxes.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'The Category Checkbox option type displays a list of category IDs. It allows the user to check multiple category IDs and will return that value as an array for use in a custom function or loop.' in file demo-theme-options.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are elos, marine, framework, wordpress-importer, tgmpa, theme-text-domain, option-tree.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
Unwanted files : hidden file(s) or folder(s).ds_store was found.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1032: screen_icon();screen_icon found in file class-tgm-plugin-activation.php. Deprecated since version 3.8.403: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); 1599: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); screen_icon found in file ot-settings-api.php. Deprecated since version 3.8.249: screen_icon( ( isset( $page['screen_icon'] ) ? $page['screen_icon'] : 'opti
I18N implementation : Proper use of ___all(Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables. Possible variable $theme_text_domain found in translation function in plugins-activation.php. Translation function calls should not contain PHP variables.
Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
CSS files : Presence of text domainText Domain: is missing from your style.css header.
Date and time implementation : Use of the_time()At least one hard coded date was found in the file content-aside.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-video.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-gallery.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-aside.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-video.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-gallery.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-single.php. Function get_option( 'date_format' ) should be used instead.
Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Use of includes : Use of include or requireThe theme appears to use include or require : class-tgm-plugin-activation.php 1085: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tinymce_ShortcodesSelector.js.php 7: require_once($wp_path.'wp-load.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tinymce_ShortcodesSelector_old.js.php 6: require_once($wp_path.'wp-load.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework.php 95: include_once( 'tinymce.php' );396: require_once 'class/Excerpt.class.php';1437: require_once(ABSPATH . 'wp-admin/includes/file.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : popup.php 12: require_once($wp_path.'wp-load.php');38: include(get_template_directory().'/framework/popup-content.php');40: include(get_template_directory().'/framework/popup-content-old.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : ot-loader.php 475: include_once( $file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.7 theme

VIEW ALL THEMES