0
Validation results

H-Code

H-Code

WordPress 5.5.1 theme
0
  • THEME TYPEWordPress theme 5.5.1
  • FILE NAMEh-code.zip
  • FILE SIZE30581099 bytes
  • MD5fca9a89ed5abf6e674f06df7c8b5dbb1
  • SHA1d0e5322fcf2346b6a2d2f59405b4395bc54b0ca0
  • LICENSECustom
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • DEMO PAGEhttp://wpdemos.themezaa.com/h-code
  • VERSION2.0.2
  • AUTHOR URI
  • CREATION DATE2020-09-05
  • LAST FILE UPDATE2020-09-05
  • LAST VALIDATION2020-09-05 23:42
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file extension_customizer.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="'.$video_url.'"'.$iframe_attributes.' width="640" height="360" allowfullscreen> in file loop-video.php. 52: echo '<iframe src=''.$video_url.'''.$iframe_attributes.' width='640' height='360'Found <iframe src="'.$video_url.'" width="640" height="360" allowfullscreen> in file portfolio-video.php. 20: echo '<iframe src=''.$video_url.'' width='640' height='360' allowfullscreen></ifrFound <iframe src="'.$video_url.'"'.$iframe_attributes.' width="640" height="360" allowfullscreen> in file loop-video.php. 48: echo '<iframe src=''.$video_url.'''.$iframe_attributes.' width='640' height='360'Found <iframe src="'.$video_url.'"'.$iframe_attributes.' width="640" height="360" allowfullscreen> in file loop-video.php. 50: echo '<iframe src=''.$video_url.'''.$iframe_attributes.' width='640' height='360'
  3. Malware : Operations on file system fopen was found in the file class.redux_helpers.php 668: //$fp = fopen( $file, 'r' );fread was found in the file class.redux_helpers.php 671: //$file_data = fread( $fp, 8192 );fclose was found in the file class.redux_helpers.php 674: //fclose( $fp );file_get_contents was found in the file admin_option.php 234: 'content' => nl2br(file_get_contents(trailingslashit(dirname(__FILE__)) . 'README.html'))file_get_contents was found in the file importer.php 369: $encode_options = file_get_contents( $theme_options_file );435: $widgets_json = file_get_contents( $widgets_json );672: return file_get_contents($upload_dir['basedir'].'/importer.log');file_get_contents was found in the file importer.php 369: $encode_options = file_get_contents( $theme_options_file );435: $widgets_json = file_get_contents( $widgets_json );672: return file_get_contents($upload_dir['basedir'].'/importer.log');file_put_contents was found in the file importer.php 655: file_put_contents($upload_dir['basedir'].'/importer.log', $data, FILE_APPEN656: file_put_contents($upload_dir['basedir'].'/importer-full.log', $data, FILE_658: file_put_contents($upload_dir['basedir'].'/importer.log', $data);file_put_contents was found in the file importer.php 655: file_put_contents($upload_dir['basedir'].'/importer.log', $data, FILE_APPEN656: file_put_contents($upload_dir['basedir'].'/importer-full.log', $data, FILE_658: file_put_contents($upload_dir['basedir'].'/importer.log', $data);file_put_contents was found in the file importer.php 655: file_put_contents($upload_dir['basedir'].'/importer.log', $data, FILE_APPEN656: file_put_contents($upload_dir['basedir'].'/importer-full.log', $data, FILE_658: file_put_contents($upload_dir['basedir'].'/importer.log', $data);file_get_contents was found in the file importer.php 369: $encode_options = file_get_contents( $theme_options_file );435: $widgets_json = file_get_contents( $widgets_json );672: return file_get_contents($upload_dir['basedir'].'/importer.log');fopen was found in the file importer.php 703: if (($handle = fopen($filename, 'r')) !== FALSE)fclose was found in the file importer.php 712: fclose($handle);file_get_contents was found in the file parsers.php 67: $success = $dom->loadXML( file_get_contents( $file ) );272: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 67: $success = $dom->loadXML( file_get_contents( $file ) );272: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 416: $fp = $this->fopen( $file, 'r' );642: function fopen( $filename, $mode = 'r' ) {645: return fopen( $filename, $mode );fclose was found in the file parsers.php 465: $this->fclose($fp);660: function fclose( $fp ) {663: return fclose( $fp );fopen was found in the file parsers.php 416: $fp = $this->fopen( $file, 'r' );642: function fopen( $filename, $mode = 'r' ) {645: return fopen( $filename, $mode );fopen was found in the file parsers.php 416: $fp = $this->fopen( $file, 'r' );642: function fopen( $filename, $mode = 'r' ) {645: return fopen( $filename, $mode );fclose was found in the file parsers.php 465: $this->fclose($fp);660: function fclose( $fp ) {663: return fclose( $fp );fclose was found in the file parsers.php 465: $this->fclose($fp);660: function fclose( $fp ) {663: return fclose( $fp );
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File welcome.php : 199: $page = 'add_management_page';File framework.php : 1366: // wrappers and need to be appened to using add_submenu_page.1417: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1468: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile framework.php : 1366: // wrappers and need to be appened to using add_submenu_page.1417: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1468: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile framework.php : 1443: $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $thisFile framework.php : 1366: // wrappers and need to be appened to using add_submenu_page.1417: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission1468: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['tFile admin_option.php : 285: 'page_parent' => 'themes.php', // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was revslider.zip hcode-addons.zip js_composer.zip focus-parallax.zip highlight-carousel1.zip one-page-restaurant.zip slider-revolution.zip home-revolution-slider-1.zip home_photography.zip home-page-revolution-2.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in enqueue.php. Themes must not deregister core scripts. 215: wp_deregister_script( 'jquerySelect2' );Found wp_deregister_script in framework.php. Themes must not deregister core scripts. 562: wp_deregister_script( 'wpb_ace' );
  2. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  3. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are H-Code, woocommerce, redux-framework, pofo-addons.
  4. PHP short tags : Presence of PHP short tagsPHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.772: if (preg_match('/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches))
  5. I18N implementation : Proper use of ___all(Possible variable $this found in translation function in admin_option.php. Translation function calls should not contain PHP variables.
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file welcome.php.480: <a href='http://docs.reduxframework.com/' class='docs button button-primary'>Docs</a483: <a href='https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=MMFMHW
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : class.redux_api.php 539: include_once( $api_check ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : extension_customizer.php 753: require_once( $class_file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : welcome.php 376: require_once 'views/about.php';391: require_once 'views/changelog.php';406: require_once 'views/extensions.php';422: require_once 'views/support.php';437: require_once 'views/credits.php';452: require_once 'views/status_report.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework.php 1711: require_once 'core/enqueue.php';2860: require_once 'core/enqueue.php';2918: require_once 'core/panel.php';3270: require_once 'core/panel.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : admin_option.php 8: require_once( dirname( __FILE__ ) . '/ReduxCore/framework.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : import-export.php 17: require_once( ABSPATH . '/wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : hcode-require-files.php 20: require_once( $path.'/'.$name.'.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : mega-menu.php 42: require_once( HCODE_THEME_MEGA_MENU . '/mega-menu-addon.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : hamburger-menu.php 23: require_once( HCODE_THEME_HAMBURGER_MENU . '/hamburger-menu-addon.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tgm-init.php 9: include_once ('class-tgm-plugin-activation.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : footer-menu.php 22: require_once( HCODE_THEME_FOOTER_MENU . '/footer-menu-addon.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes