Okay, first off, that’s an incredibly badly made theme. Your item number 2 there indicates to me that he making AJAX calls in entirely the wrong way.
Secondly, look for anything in the theme that is using http but not in a link. allow_url_include basically lets you include some PHP from a remote site, which is indeed bad, but he might just be using it wrong.
If the theme was freely available, I could look at it and give you more information. Is this theme available for download?
Related Posts:
- Memory errors with media upload, WordPress can’t use more than 96M (while there’s 512 available!)
- Set WP_MAX_MEMORY_LIMIT higher than PHP.ini memory_limit
- WordPress Ignoring .user.ini
- adding custom user input fields in WordPress admin dashboard gives error The link you followed has expired. Please try again
- WP & Server Speed [Teacher Question]
- PHP E_WARNING being shown despite php.ini [closed]
- WordPress upload file size error even after raising php limits
- php_gd2 extension not loading on Windows
- Maximum file Upload
- How does WordPress rewrite URLS using its PHP scripts
- How to fix UpdraftPlus’s memory issue?
- WordPress article with 50 000 words loading slow – 100% cpu
- How to include checkbox in widget backend form?
- Upgrading PHP version results in “Use of undefined constant WP_CONTENT_DIR” warning?
- How to hide get_theme_mod if field empty
- renaming an admin menu item with decimal array index number
- How to get the original price of the product in woocommerce?
- How to make sure that only one wp_cron() runs at a time?
- Fatal error: Call to undefined function wpsc_cart_item_count()
- No wp-config.php file on local install of wordpress – site still displays
- Widgets not showing in my custom theme
- Edit category output
- Woocommerce Custom CSV export
- integrating external php library into wordpress- the right way
- To echo or not to echo?
- Different background-image by category
- How to limit the content coming from wordpress shortcodes?
- What is the fastest way to load PHP functions that are only used in one theme template?
- Writing scripts using WordPress / WooCommerce classes?
- storing wp_head in a variable?
- Change description on specific WooCommerce product status change
- How do I attach a php file to an arbitrary slug and still have access to the wp-core functions?
- Woocommerce redirect thankyou page based on product ID doesn’t empty Cart
- Is_template how to add one more template [closed]
- Open post-content in archive page in a Modal box with bootstrap
- Creating own shortcode – echoeing php variable based on JS variable
- How to modify URL (add GET values) after front end form submission?
- Sort meta-value in the sequence array in pre_get_post
- How do I link a button I created in theme customizer to a function?
- Error: options page not found
- Why File_exists returns true with or without ABSPATH?
- WordPress automatically adds links to uploaded images
- Security for data obtained from the database
- How to add specific meta tags to head of cart and checkout pages in woocommerce?
- Royalty-Free Sliders used in theme development
- get_template_directory_uri() providing wrong path for img
- Custom Pagination is Broken
- HTML showing after PHP code in tag
- Login redirect. Check user meta and redirect accordingly
- Adding Author Box Meta Links with Co-Authors
- Lost in trying to create user database system
- Local WordPress with WAMP downloads files out of Nowhere
- Remove   from the_excerpt
- Why is my max_upload_filesize being limited to 2M? [duplicate]
- Errors being created by admin-ajax.php
- Posts are not looping through correctly
- Can’t pass the variable from a select to PHP query
- form $_post action value gets truncated after it passes through two forms
- “if parent category is” conditional?
- Deactivate a plugin on wp version
- Ajaxurl suddenly not defined
- How to echo the_title from an array of posts?
- the_post_thumbnail issues
- linked php file not executing php
- Some problems calling a function into sprintf() inside functions.php template file [closed]
- WordPress -> If Is Role Subscriber Show Image?
- Add other class content with reference class value
- how can i update my postmeta without losing old data?
- Slug duplicates once clicking on link
- Language does not switch while cache is enabled
- How can I update the price when someone enters postcode or zip code in woocommerce checkout page?
- My single.php page skips the first div tag
- Limit content size by character or word in database
- String replace for Login/Logout concatenation problem in menu
- PHP call_user_func_array() error
- Redirect after login depending on the URL
- Searching a custom WP table and displaying results in an HTML table
- Set user status to absent on WordPress
- Customizer: How to Sanitize a Decimal Number Range
- Obtain wordpress user role
- Displaying POST content with HTML tags and all
- WordPress 3.0 PHP Error – notice WordPress_product_Type was called incorrectly
- Retrieving specific images from Media Library
- direct query to post_meta table
- Access methods in plugin template
- Adding unique marketing messages between certain products whilst using isotope/Infinite Scroll
- Notice: Undefined index: fix with isset [closed]
- Include administrator in author list
- Pass php to database in JQuery: With AJAX?
- List sibling pages widget, exclude current page
- WP Simple Fields – Single repeatable field inside repeatable field group
- Amending PHP for WordPress Theme
- get_permalink returning first letter
- Path for contact form file
- File Upload with Server in safe_mode
- WP plugin updates [duplicate]
- Custom Archive Page
- Load files content [closed]
- Shortcode for Visual Composer Grid fails turning string to integer
- Correct way to perform a GET to another PHP file hosted on wordpress