0
Validation results

Porto

Porto

WordPress 6.6.2 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file vc_section.php. 167: $output .= rawurldecode( base64_decode( porto_strip_script_tags( $top_divider_custom ) ) );203: $output .= rawurldecode( base64_decode( porto_strip_script_tags( $bottom_divider_custom ) ) );Found base64_decode in file porto-studio.php. 158: $block_content = base64_decode( $block['content'] );
  2. Security breaches : Use of base64_encode() Found base64_encode in file shortcodes.php.
     'value' => base64_encode( '' ),
     'value' => base64_encode( '' ),
  3. Malware : Operations on file system fopen was found in the file class.redux_helpers.php 646: // $fp = fopen( $file, 'r' );fread was found in the file class.redux_helpers.php 649: // $file_data = fread( $fp, 8192 );fclose was found in the file class.redux_helpers.php 652: // fclose( $fp );
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File framework.php : 1271: // wrappers and need to be appened to using add_submenu_page.1323: 'add_submenu_page',1394: 'add_submenu_page',File framework.php : 1271: // wrappers and need to be appened to using add_submenu_page.1323: 'add_submenu_page',1394: 'add_submenu_page',File framework.php : 1361: 'add_menu_page',File framework.php : 1271: // wrappers and need to be appened to using add_submenu_page.1323: 'add_submenu_page',1394: 'add_submenu_page',File speed_optimize_wizard.php : 93: add_submenu_page( 'porto', esc_html__( 'Speed Optimize Wizard', 'porto' ), File setup_wizard.php : 1025: add_submenu_page( 'porto', esc_html__( 'Setup Wizard', 'porto' ), esc_html_File admin.php : 92: $welcome_screen = add_menu_page( 'Porto', 'Porto', 'administrator', 'porto', array( $this, 'wFile admin.php : 93: $welcome = add_submenu_page( 'porto', __( 'Dashboard', 'porto' ), __( 'Dashboard', 'po95: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme Optio96: $theme_options = add_submenu_page( 'porto', __( 'Advanced Options', 'porto' ), __( 'Advanced98: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme OptioFile admin.php : 93: $welcome = add_submenu_page( 'porto', __( 'Dashboard', 'porto' ), __( 'Dashboard', 'po95: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme Optio96: $theme_options = add_submenu_page( 'porto', __( 'Advanced Options', 'porto' ), __( 'Advanced98: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme OptioFile admin.php : 93: $welcome = add_submenu_page( 'porto', __( 'Dashboard', 'porto' ), __( 'Dashboard', 'po95: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme Optio96: $theme_options = add_submenu_page( 'porto', __( 'Advanced Options', 'porto' ), __( 'Advanced98: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme OptioFile admin.php : 93: $welcome = add_submenu_page( 'porto', __( 'Dashboard', 'porto' ), __( 'Dashboard', 'po95: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme Optio96: $theme_options = add_submenu_page( 'porto', __( 'Advanced Options', 'porto' ), __( 'Advanced98: $theme_options = add_submenu_page( 'porto', __( 'Theme Options', 'porto' ), __( 'Theme OptioFile class-tools.php : 27: add_submenu_page( 'porto', __( 'Tools', 'porto' ), __( 'Tools', 'porto' ),
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was geodirectory-porto-theme-compatibility-pack.zip.
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in functions.php. Themes must not deregister core scripts. 740: //wp_deregister_script( 'isotope' );960: wp_deregister_script( 'dokan-chart' );
  2. theme tags : Presence of bad theme tagsFound wrong tag woocommerce in style.css header.Found wrong tag corporate in style.css header.Found wrong tag ecommerce in style.css header.Found wrong tag responsive in style.css header.The tag blue has been deprecated, it must be removed from style.css header.The tag black has been deprecated, it must be removed from style.css header.The tag green has been deprecated, it must be removed from style.css header.The tag white has been deprecated, it must be removed from style.css header.The tag light has been deprecated, it must be removed from style.css header.The tag dark has been deprecated, it must be removed from style.css header.The tag red has been deprecated, it must be removed from style.css header.The tag fixed-layout has been deprecated, it must be removed from style.css header.The tag responsive-layout has been deprecated, it must be removed from style.css header.Themes that use the tag accessibility-ready will need to undergo an accessibility review.
    See https://make.wordpress.org/themes/handbook/review/accessibility/
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'If select "Full Info", extra fields such as first name, last name and password confirmation are added in registration form.' in file settings.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Plugin transients' in file tools.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Studio Block transients' in file tools.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Compile all css' in file tools.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Refresh templates information' in file tools.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'porto' in file init.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are porto, js_composer, woocommerce, yith-woocommerce-compare, yith-woocommerce-wishlist, redux-framework, tgmpa, porto-functionality.
  4. PHP short tags : Presence of PHP short tagsPHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.653: if ( preg_match( '/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches ) ) {
  5. I18N implementation : Proper use of ___all(Possible variable $key found in translation function in speed_optimize_wizard.php. Translation function calls should not contain PHP variables. Possible variable $number_of_units found in translation function in init.php. Translation function calls should not contain PHP variables.
  6. I18N implementation : Proper use of esc_html___all(Possible variable $number_of_units found in translation function in init.php. Translation function calls should not contain PHP variables.
  7. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file yit-pointers.php.72: '<h3> %s </h3> <p> %s </p> <p> %s <a href='http://yithemes.com/product-category/plugins/' target='_blank'>Yithemes.com90: '<h3> %s </h3> <p> %s </p> <p> %s <a href='http://yithemes.com/product-category/plugins/' target='_blank'>Yithemes.com72: '<h3> %s </h3> <p> %s </p> <p> %s <a href='http://yithemes.com/product-category/plugins/' target='_blank'>Yithemes.com90: '<h3> %s </h3> <p> %s </p> <p> %s <a href='http://yithemes.com/product-category/plugins/' target='_blank'>Yithemes.comPossible hard-coded links were found in the file speed_optimize_wizard.php.483: <input type='checkbox' value='true' name='google_webfont' <?php echo isset( $porto_settings['google-webfont-loader'] ) ? checked( $porto_settings['google-webfont-loader'], true, false ) : ''; ?>> <?php printf( esc_html__( 'Enable %1$sWeb Font Loader%2$s for Google Fonts', 'porto' ), '<a href='https://developers.google.com/fonts/docs/webfont_loader' target='_blank'>',486: <p><?php printf( esc_html__( 'By using this option, you can increase page speed about 4 percent in %1$sGoogle PageSpeed Insights%2$s for both of mobile and desktop.', 'porto' ), '<a href='https://developers.google.com/speed/pagespeed/insights/' target='_blank'>',694: <?php printf( esc_html__( 'This improves page load time as the browser caches preloaded resources so they are available immediately when needed. By using this option, you can increase page speed about 1 ~ 4 percent in %1$sGoogle PageSpeed Insights%2$s for both of mobile and desktop.', 'porto' ), '<a href='https://developers.google.com/speed/pagespeed/insights/' target='_blank'>',486: <p><?php printf( esc_html__( 'By using this option, you can increase page speed about 4 percent in %1$sGoogle PageSpeed Insights%2$s for both of mobile and desktop.', 'porto' ), '<a href='https://developers.google.com/speed/pagespeed/insights/' target='_blank'>',694: <?php printf( esc_html__( 'This improves page load time as the browser caches preloaded resources so they are available immediately when needed. By using this option, you can increase page speed about 1 ~ 4 percent in %1$sGoogle PageSpeed Insights%2$s for both of mobile and desktop.', 'porto' ), '<a href='https://developers.google.com/speed/pagespeed/insights/' target='_blank'>',806: <a href='https://gtmetrix.com/leverage-browser-caching.html' target='_blank'><?php ePossible hard-coded links were found in the file setup_wizard.php.1974: <p><em><i class='fas fa-info-circle' style='font-size: 1.2em'></i></em> More details about item support can be found in the ThemeForest <a href='http://themeforest.net/page/item_support_policy' target='_blank'><strong>It1996: <li class='documentation'><i class='status fas fa-book'></i> <a href='http://www.portotheme.com/wordpress/porto/documentation'><?php esc_html_e( 1997: <li class='woocommerce documentation'><i class='status fas fa-book'></i> <a href='https://docs.woocommerce.com/document/woocommerce-101-video-series/'><?php 1999: <li class='rating'><i class='status fas fa-star'></i> <a href='http://themeforest.net/downloads'><?php esc_html_e( 'Leave an Item Rating',2003: <p><em><i class='fas fa-info-circle' style='font-size: 1.2em'></i></em> Please come back and <a href='http://themeforest.net/downloads' target='_blank' style='font-weight: 700'>1999: <li class='rating'><i class='status fas fa-star'></i> <a href='http://themeforest.net/downloads'><?php esc_html_e( 'Leave an Item Rating',2003: <p><em><i class='fas fa-info-circle' style='font-size: 1.2em'></i></em> Please come back and <a href='http://themeforest.net/downloads' target='_blank' style='font-weight: 700'>Possible hard-coded links were found in the file settings.php.828: 'desc' => sprintf( esc_html__( 'By using this option, you can increase page speed about 4 percent in %1$sGoogle PageSpeed Insights%2$s for both of mobile and desktop.', 'porto' ), '<a href='https://developers.google.com/speed/pagespeed/insights/' target='_blank'>',8109: 'desc' => __( 'Please input animation. Please reference <a href='http://daneden.github.io/animate.css/'>animate.css</a>. ex: fadeIn', 'porto8116: 'desc' => __( 'Please input animation. Please reference <a href='http://daneden.github.io/animate.css/'>animate.css</a>. ex: fadeOut', 'port8109: 'desc' => __( 'Please input animation. Please reference <a href='http://daneden.github.io/animate.css/'>animate.css</a>. ex: fadeIn', 'porto8116: 'desc' => __( 'Please input animation. Please reference <a href='http://daneden.github.io/animate.css/'>animate.css</a>. ex: fadeOut', 'portPossible hard-coded links were found in the file admin.php.43: $this->add_wp_toolbar_menu_item( $porto_parent_menu_title, false, admin_url( 'admin.php?page=porto' ), array( 'class' => 'porto-menu' ), 'porto' );44: $this->add_wp_toolbar_menu_item( __( 'Dashboard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto' ), array(), 'porto-dashboard' );52: $this->add_wp_toolbar_menu_item( __( 'Setup Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-setup-wizard' ) );53: $this->add_wp_toolbar_menu_item( __( 'Speed Optimize Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-speed-optimize-wizard' ) );54: $this->add_wp_toolbar_menu_item( __( 'Tools', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-tools' ) );259: return new WP_Error( 'not_registerd', __( 'Please <a href='admin.php?page=porto'>register</a> Porto theme to get access to pre-built d367: <p>Please <a href='admin.php?page=porto'>register</a> porto theme to get access to pre-built d402: $('.themes .theme.active .theme-screenshot').after('<div class='notice update-message notice-error notice-alt'><p>Please <a href='admin.php?page=porto' class='button-link'>verify purchase</a> to get update43: $this->add_wp_toolbar_menu_item( $porto_parent_menu_title, false, admin_url( 'admin.php?page=porto' ), array( 'class' => 'porto-menu' ), 'porto' );44: $this->add_wp_toolbar_menu_item( __( 'Dashboard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto' ), array(), 'porto-dashboard' );52: $this->add_wp_toolbar_menu_item( __( 'Setup Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-setup-wizard' ) );53: $this->add_wp_toolbar_menu_item( __( 'Speed Optimize Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-speed-optimize-wizard' ) );54: $this->add_wp_toolbar_menu_item( __( 'Tools', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-tools' ) );259: return new WP_Error( 'not_registerd', __( 'Please <a href='admin.php?page=porto'>register</a> Porto theme to get access to pre-built d367: <p>Please <a href='admin.php?page=porto'>register</a> porto theme to get access to pre-built d402: $('.themes .theme.active .theme-screenshot').after('<div class='notice update-message notice-error notice-alt'><p>Please <a href='admin.php?page=porto' class='button-link'>verify purchase</a> to get update43: $this->add_wp_toolbar_menu_item( $porto_parent_menu_title, false, admin_url( 'admin.php?page=porto' ), array( 'class' => 'porto-menu' ), 'porto' );44: $this->add_wp_toolbar_menu_item( __( 'Dashboard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto' ), array(), 'porto-dashboard' );52: $this->add_wp_toolbar_menu_item( __( 'Setup Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-setup-wizard' ) );53: $this->add_wp_toolbar_menu_item( __( 'Speed Optimize Wizard', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-speed-optimize-wizard' ) );54: $this->add_wp_toolbar_menu_item( __( 'Tools', 'porto' ), 'porto', admin_url( 'admin.php?page=porto-tools' ) );259: return new WP_Error( 'not_registerd', __( 'Please <a href='admin.php?page=porto'>register</a> Porto theme to get access to pre-built d367: <p>Please <a href='admin.php?page=porto'>register</a> porto theme to get access to pre-built d402: $('.themes .theme.active .theme-screenshot').after('<div class='notice update-message notice-error notice-alt'><p>Please <a href='admin.php?page=porto' class='button-link'>verify purchase</a> to get updatePossible hard-coded links were found in the file header-builder.php.685: <a href='https://youtu.be/pk2W281QUa8' class='button' target='_blank'><?php esc_htmlPossible hard-coded links were found in the file welcome.php.79: <?php printf( esc_html__( 'Before you get started, please be sure to always check out %1$sthis documentation%2$s. We outline all kinds of good information, and provide you with all the details you need to use Porto.', 'porto' ), '<a href='http://www.portotheme.com/wordpress/porto/documentation' target='_blank'>',83: <?php printf( esc_html__( 'If you are unable to find your answer in our documentation, we encourage you to contact us through %1$ssupport page%2$s with your site CPanel (or FTP) and WordPress admin details. We are very happy to help you and you will get reply from us more faster than you expected.', 'porto' ), '<a href='http://www.portotheme.com/support' target='_blank'>', '</a>' ); ?>86: <a href='https://www.portotheme.com/wordpress/porto/documentation/changelog/' targetPossible hard-coded links were found in the file class-tgm-plugin-activation.php.2751: $action_links['register'] = '<span style='color:#666'>Please</span> <a href='admin.php?page=porto'>register</a> <span style='color:#666'>the theme</span
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  9. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : style-editor.php 34: require_once( PORTO_LIB . '/lib/color-lib.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : extension_custom_fonts.php 145: // require_once 'System.php'; // WordPress core file If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework.php 1548: require_once 'core/enqueue.php';2739: require_once 'core/enqueue.php';2797: require_once 'core/panel.php';3147: require_once 'core/panel.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme_options.php 9: require_once( PORTO_ADMIN . '/functions.php' );12: require_once( PORTO_ADMIN . '/ReduxCore/framework.php' );14: require_once( PORTO_ADMIN . '/theme_options/settings.php' );16: require_once( PORTO_ADMIN . '/theme_options/save_settings.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup_wizard.php 966: require_once 'class-porto-demo-history.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : Functions.php 941: $mime = require('mime'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : header-builder.php 165: include_once 'classes/simple-notice-control.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : importer-api.php 68: require_once( ABSPATH . '/wp-admin/includes/file.php' );179: require_once( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : parsers.php 82: require_once( ABSPATH . '/wp-admin/includes/file.php' );388: require_once( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : porto-parsers.php 85: require_once( ABSPATH . '/wp-admin/includes/file.php' );393: require_once( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : wordpress-importer.php 174: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : porto-wordpress-importer.php 215: require_once( ABSPATH . 'wp-admin/includes/upgrade.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : plugins.php 340: require_once( ABSPATH . 'wp-admin/includes/plugin.php' );347: include_once( WC()->plugin_path() . '/includes/wc-template-functions.php' ) If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : lazy-load.php 61: require_once( PORTO_LIB . '/lib/color-lib.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : woocommerce-swatches.php 23: require 'classes/class-product-swatches-tab.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : layout.php 7: require_once( PORTO_FUNCTIONS . '/layout/header.php' );8: require_once( PORTO_FUNCTIONS . '/layout/breadcrumbs.php' );9: require_once( PORTO_FUNCTIONS . '/layout/page-title.php' );10: require_once( PORTO_FUNCTIONS . '/layout/footer.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : content_type.php 2: require_once( PORTO_FUNCTIONS . '/content_type/portfolio_like.php' );3: require_once( PORTO_FUNCTIONS . '/content_type/blog_like.php' );4: require_once( PORTO_FUNCTIONS . '/content_type/meta_values.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-dynamic-style.php 134: require_once( PORTO_DIR . '/style.php' );142: require_once( PORTO_DIR . '/style-internal.php' );158: require_once( PORTO_DIR . '/style-internal.php' );275: require_once( PORTO_ADMIN . '/scssphp/scss.inc.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : woocommerce.php 9: require_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : style-internal.php 38: require_once( PORTO_LIB . '/lib/color-lib.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : style.php 75: require_once( PORTO_LIB . '/lib/color-lib.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes