I'm pretty sure I've gotten scammed, but I want to make sure I'm not missing something. At least I'm only out $15, so it's not the worst.
The other day I tried out the free version of a theme and like the way it looked and all, so I decided to purchase the pro version. They sent me a zip file that has the strangest files in it. It's nothing at all like what I've every seen in a theme folder. I did scan it several times with Malwarebytes and it says it's fine.
They keep insisting it will work — which it doesn't. I've tried uploading the zip file through WordPress and then unzipping and using FTP. They've asked multiple times for my login details so they can "fix it". Of course I'm not doing that, and that's the big red flag for it being a scam.
I've been using WordPress for over 15 years and I know the types of files that should be there. But perhaps, I really am doing something wrong and it's just in a format that I don't recognize.
Inside the main folder there are several other folders: .git, .vscode, assets, css. And then a .gitignore file and a readme file. I've looked at many of the files and a good many of them appear to be placeholders or sample type files with no real content. Other files might be something, but I don't think I'm opening them with the correct program.
Am I missing something here? Is this a legit sounding folder? I don't know anything about .git or how it works.
Thanks and please don't tell me I was stupid. I already know that.
.git is version control, they have a repo in either Github, Bitbucket, or some other cloud provider. This is normal and EVERY developer should be using git, or at least svn for version control.
.vscode is the “local” config for the VSCode editor. You can have custom config for things like linters, theme checks, extensions used, ect. I normally don’t include this file but I know some companies require it so every dev is on the same page with code style and all.
assets and css are also normal folders for development. I am guessing you haven’t developed websites outside of WordPress?
.gitignore is used with version control to ignore files not meant for the repo, such as compiled files, cache, etc.
Readme is a standard file and EVERY repo should have one explaining file struct, build process, local dev setup, general info about the code, sometimes change logs, ect.
Everything you’ve described sounds totally normal as far as files go. Those are all extremely common folders/files you describe. My custom themes have everything you mentioned. As to why the theme isn’t working, I have no idea. Could be user error, could actually be the theme is missing pieces. None of us have any idea unless you can either share the theme, show screenshots of the files/folders in it, share code, or link to where you purchased the theme.
Nothing that you’ve described sounds inherently malicious. A readme should come with pretty much any file package. .git and .gitignore are standard git version control files. .vscode is a Microsoft Visual Studio code settings folder. /assets, /css aren’t uncommon naming conventions for directories within a theme. Now some of this stuff is a bit messy to ship in a sold product, granted, but again, none of these things on their own sound like a virus or a scam, though of course that doesn’t mean it *couldn’t* be either.
As for why it isn’t working, hard to say without fully knowing exactly what you’re dealing with besides a bunch of common development files/directories.
You clearly don’t know what types of files that should be there my friend.
Here is a screenshot of the contents of the theme folder.
https://i.redd.it/drmy4zto2ktd1.gif