This author's response time can be up to 1 business day.
Hi! Does the Invent theme work well with the polylang plug in?
Yes – it does work with polylang plugin. Thanks for your interest.
This comment is currently being reviewed.
We will issue an update within this weekend to remove the skin.php to ensure compliance. We have already done that for our later themes. Meanwhile I will need to flag your post – it is simply too long and occupies one whole page. You can also contact us via our forum – http://support.portfoliotheme.org/forums/forum/invent-theme-support/ for further help or email us – https://themeforest.net/user/livemesh#contact. Thanks.
Oh come on – you’re hiding the post that says your theme currently has a huge security hole? Seriously? Is this any way to treat your customers? This needs a real fix – it’s a huge problem. Do I need to report this directly to envato?
We had kept the changes ready for most of our themes (not just Invent) and shipping the changes today. We do care for our customers – not sure why you assume otherwise. Pasting a huge unreadable comment with cryptic messages does not help anyone and as you may have guessed – we are not holding emergency meetings here thinking how to handle this “urgent crisis” for our theme (more below).
Meanwhile, can you pls explain how someone could have exploited this file to take control of the server since you seem to believe this is a huge vulnerability? Security checks follow guidelines and can return many false positives – compliance issue does not mean that specific file has a problem.
I checked the code of the skin.php file and cannot see how it could be used to cause harm to the site installation. We do URL decode the input GET param and output CSS if valid value is found. The content type of the file is listed as CSS so that browsers handle this as a CSS file and not as a regular HTML file with scripts and hence without the vulnerabilities associated with a HTML file.
We still went ahead and made the change for maintenance reasons – although chances are slim due to nature of the file, the code may change in future and we do not want issues then. Three of our recent themes had already removed the file anyway and hence we had to port the change to these earlier themes.
While I appreciate your initiative in reporting this to us and following up on the same, I request you give us the benefit of doubt instead of assuming everything reported by the compliance tools require urgent remedy. Thank you.
Wow, you are clueless. XSS is a client-side security issue. This needs to get fixed, period. Any client of yours who accepts credit cards and uses your theme is currently not PCI compliant. This is not a false positive – our testing indicates that your themes do in fact allow for third-party code to be injected.
“Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.” More @ https://en.wikipedia.org/wiki/Cross-site_scripting
I am curious – which files in Invent allow third party code to be injected. Can you be more specific so that we can fix the issue?
As I said earlier the file reported by you – skin.php does not allow third party scripts to be executed since it is marked content-type CSS.
Any page called with ?skin=blah allows for the injection. Instead of flagging my pasted report from ControlScan (a PCI compliance tool), you should have read the actual alert generated as it clearly describes the issue. It includes sample URL that demonstrates the exploit. ALL pages on the site running your theme are vulnerable.
I didn’t paste all that just for shits and giggles. It contained a clear explanation of the problem.
Ok – again this is related to skin.php file and nothing else. I am curious how they can make this file execute any script at all. At worst, it can print the third party script but cannot execute since it is marked as content CSS.
Can you pls email the complete report to me here – https://themeforest.net/user/livemesh#contact. Thanks.
Have submitted an update – pls run the tool again once you receive the update notification and see if things look better. Thanks.
Is it possible to have an image background and login page only? Nothing else on the page.
Thanks for your interest. I am not exactly clear on your requirement and context of your query. Can you pls elaborate a bit on what you need?
Because I don’t sell courses and we are going to use it for company training, I really only want a login page for the homepage. So maybe a background image and a login form.
Is this something that meets your need? -
The theme itself does not directly help achieve this.
Yes. That’s what I was looking for. What about TinCan API link?
We use LearnDash – a paid plugin that needs to be purchased separately for LMS functions. You need to check with support at LearnDash about using TinCan API. Here is a link to information about the same from them -
Hi… I’ve purchased the theme but I can’t login to the forum support. I’ve emailed you and I have no answer. I’ve found some bugs that I need to fix…
Have emailed you the login details after creating an user account in the forum. Pls do let us know about the issues and we will be happy to get them resolved for you. Thanks for your purchase.
I am looking for a theme that suits my requirements. I’m currently using a LMS theme in themeforest similar to this but it doesn’t fully cover all of the requirements I have. If this theme can offer all of these requirements on purchase then I will consider changing the theme to use this theme instead. Here it goes:
1. I want a wordpress theme that supports video-driven approach for e-learning. It should be something like admins can create content (mostly will upload video files and write some texts or upload some other document files such as .pdf files or slides) then only the students who are enrolled to the course can access it.
2. The frontend does not need to have enrollment functions in it. The students or visitors of the site will not be able to enroll any courses by themselves. Only the admins can selectively enroll students into courses manually in the backend (admin panel).
3. Instead of managing students individually in every courses, I want it to have something like a grouping to group students into a group for easier management for admins. The admins can assign students into groups (many-to-many), and each group will can be assigned into courses. The students who are in a group that is assigned into a course will be able to access the course that the group is assigned to.
4. Between the courses and students, and between the courses and groups, there must be an extra field to check for expiry date for the relationship. For example, group G is assigned to course C with an expiry date set to the end of this month then all of the students will be able to access course C until the end of the month, and the same rule applies to individual students who access the course without a group. Moreover, it is possible that it can use crontab to check when each student or group that is expired. If the process determines that the student or the group has reached the expiry date of any courses, the relationship between both of them will be removed so that the student or the group can no longer access the course.
5. The site will not use any kind of payment for now. It must allow the admin or webmaster to disable the purchase system or anything related to money out of the website (temporary), because the students will be assigned to courses with free of charge by admins.
Thanks for your interest. We support LearnDash – https://www.learndash.com, a paid plugin for LMS. You need to purchase LearnDash separately.
All your queries are LMS related and hence you need to direct these queries to LearnDash sales/support. Hope they will be able to address these requirements.
Hey – great theme! Please assist – I cannot get the main menu to align to the right as per your demo. My install defaults to the menu items aligning left against the logo. Thank you.
Don’t worry – I found the css on your support forum. Thanks.
I am not able to change the department’s layout from theme’s setting and on department’s page some contact information tab is coming on right side and I don’t understand from where it is coming from. Please suggest.
here is the screenshot for reference: http://prntscr.com/dzkcfm
You will need to copy the single-department.php file to your child theme and pls have a look at line number 63 where the sidebar code resides.
Pls open a thread in the support forum – http://support.portfoliotheme.org/forums/forum/invent-theme-support/ if you have further queries and we will be glad to help. Thanks.
We have purchased a license for one domain and now we are trying to shift the domain contents to another institution domain and make the old one idle. Is it possible to use the same license code to the theme of new domain with the same theme.
Yes that is allowed. You just need to have a single live site – that is the requirement and hence you are allowed to move to another domain without license issues if the old domain is bring brought down or being redirected to the new domain. Thanks for checking with us.
Could you send out documentation before I purchase
Sure we can. Can you pls email us via our profile page contact form – https://themeforest.net/user/livemesh#contact and we will email you back the documentation for the theme. Thanks for your interest.
Hello, I would like to change the loading image to use maybe fontawsome spinning cog icon. I did a search and saw where you posted it with an image change, but can fontawsome be used instead? This is the code I had found in search-
background: #FFF url(http://portfoliotheme.org/wp-content/uploads/2014/05/Preloader_11.gif) no-repeat 50% 50%;
Why not just create an image of suitable size out of fontawesome icons? You can use the tool here – https://icomoon.io/app/#/select to do the same. Better to generate SVGs and use the same.
Tried to access your support form but I kept getting errors trying to access it. But my question is, is it possible to add a full width area above the footer on certain pages only that would allow for text and a button?
What is the exact error you are seeing while accessing the forum – http://support.portfoliotheme.org/forums/forum/invent-theme-support/? We would love to know so that we can fix the same.
If you need the full width area to be on a certain page, you can choose the full width page template and then add the content below all other content to show up just above the footer. If you need something that shows up on all pages and posts, you need to modify the footer.php file in your child theme. Do let us know if you need further help on this.
Hi there, can courses like this: http://portfoliotheme.org/themes/?theme=Invent be used for offline courses? I am looking to sell courses from other providers so I need a way if people would sign up they are or redirected or can enter their information.
Looking forward to receive a reply
Sorry about the delayed response. You can customize the theme to your needs. If you are planning to sell courses online, you should probably talk to LearnDash folks on what you want to accomplish. LearnDash is a paid LMS plugin that helps sell courses.
The courses captured by theme helps capture courses conducted offline. Regarding payment or signup for the same, you will need customization since the theme does not support this out of the box.
Thanks for your interest.
I saw in earlier comments that one might have to do some CSS if using buddypress and adding forums to the site under this theme. Have more recent versions of the theme been updated so that I can more easily add a forums or sociallearning component to my site without going to such trouble? If not, could I use multi-theme plugin and add the boss child theme SocialLearner to do that or do you have a separate child theme for this function?
By earlier comments I mean from 2 years ago.
Thanks for your interest. We had hardly any requests from our customers to do this and hence we did not prioritize the same. You may need to still do some styling for buddypress if you use Invent.
I went ahead and purchased the theme and the first thing that I noticed was that there are no installation instructions, or if there are I have yet to find them and it wasn’t obvious to me and they definitely didn’t come in the email confirmation I received. Also, I downloaded the first zip file and the installation failed (no css files) so I then downloaded the smaller file and the installation was successful. The thing I liked is that I was prompted to install plug-ins, but again, no good instructions, so not the best for someone with mid-level beginner/intermediate experience. I feel I can figure most things out myself, but I can say that good documentation makes it so much faster. I will go hunt for some guides, but having them given to me would have been awesome.
Me again. Apparently there is a “README – Importing sample data and replicating demo site” file that I can’t copy when I extract the complete zip file as well. The Error is 0×80010135:Path too long. Could you please just email me the file or point me to good instructions for set-up? Thanks!
Pls open a new topic in our support forum – http://support.portfoliotheme.org/forums/forum/invent-theme-support/ with a temp login to your site as a private msg, we ll help you in setting up of demo site.
The link to sample data is available in the readme txt file ,you need to download the demo data from that given link.
And you can check the theme setup video here- http://support.portfoliotheme.org/faqs/invent-theme-how-to-replicate-the-demo-site-in-10-min/ .
The video really doesn’t have words and so you gotta squint to see what they are doing and keep pausing, rewinding – hard on old eyes. As I said earlier, for whatever reason the read me file won’t open for me on my PC. I have Windows 10, but it says the file name is too long. I suppose I will try it on my Mac, but had hoped you could just send it to me.
Can you pls open a topic in our support forum here – http://support.portfoliotheme.org/forums/forum/invent-theme-support/ with a temp login to your site as a private msg , ll help setup demo site
or you can send us an email via our profile page – http://themeforest.net/user/livemesh#contact and ll send the demo data.
I figured it out. For whatever reason I couldn’t unzip all the files on my Windows 10 machine, but had no problem on a Mac. Not sure if that is unique to me or if you have heard a few complaints of that.
No one has reported this issue so far even i have tested in my machine (windows 10) and found no issue.
Weird, I wonder why I couldn’t fully unzip. I just right click the file in file explorer and choose extract all. Then I get the message that file name was too long for the ReadMe file and that not all files could be extracted. All I get when I extract in Windows 10 with this method is:
invent (compressed folder)
invent-child (compressed folder)
When I download to my MacBook Pro I had no problems.
Suppose I should have just tried unzipping it in some different way on my PC, but got it to work on my Mac, so didn’t bother.
Do you experience the same issue with the latest update released today?
Where do I find out what version of PHP this theme is compatible with? I tried 7.0 and it crashed my wp-admin. This is kind of weird since LearnDash and BuddyBoss require PHP7.0 and WordPress.org recommends a minimum of 7.0.
Pls give me few hours and I will do a retest of the theme with PHP 7 and get back to you with an update. Thanks.
Me again (yes, I know). I can’t seem to get the revolution slider plugin to upload. I add new plugin (I am using the file revslider.zip (dated 3/8/17 as it didn’t load automatically earlier as in the video) and every time I try to install I get a plugin install failed message.
Can you pls try to deactivate all other plugins and try upload revslider file and check ?If the problem is still on then you can open a topic in our support forum and share a temp login to your site, we ll help you out.
I ended up uploading thru filezilla and it finally worked.
Did you find any issues with Invent theme with PHP 7.0 or 7.1?
I checked the theme with both 7.0 and 7.1 and just saw a few deprecated warnings related to theme defined widgets and there was no crash as such. I will certainly get the theme updated to handle the warnings which show up only if you enable DEBUG mode.
Meanwhile, can you pls disable all plugins and see if the wp-admin still crashes for 7.x version? If it does, I would need you to provide me the error log file since I am unable to reproduce the issue here. You can email me the same via my profile page contact form – https://themeforest.net/user/livemesh#contact.
Have done the required changes to the theme – ready to issue a compatibility update. Will wait for an update from you regarding the crash you experienced. Thanks.
An update has been submitted that fixes all warnings with PHP 7.x versions. Thanks for reporting this.
Where is this 75 pages of extensive documentation for the theme supposed to be found? Wish there was just a link to it here.
You can just unzip the theme download zip from ThemeForest Downloads and documentation is part of the bundle. Look for the folder named ‘Invent Documentation’.
Use, by you or one client, in a single end product which end users are not charged for. The total price includes the item price and a buyer fee.
Use, by you or one client, in a single end product which end users can be charged for. The total price includes the item price and a buyer fee.
View license details
Get it now and save up to $23.50
Unlimited graphic downloads & digital courses. Only $29/month
22,000+ templates & 1,000+ courses
Learn almost anything with
Envato Tuts+ for free
9000 free tutorials, 3000 paid courses
Designers matched perfectly to
you on Envato Studio
2000 artists ready to undertake your work