Try doing clean install of the version of VC included with the latest theme version; as found in the /plugins/ folder from ‘all files’ zip download; delete old version in your /wp-content/plugins/ folder via FTP, upload new version.

• This reply was modified 9 years by simchris.

Not my theme, as i’ve said previously.
Just being helpful to answer your questions while I’m waiting for my server updates to finish over here 🙂

In WordPress, you cannot ‘auto update’ themes unless in the WordPress.org repository, or if there is some intrusive wrapper plugin built into a theme “framework” which is a security risk.

FTP is best way to update/backup your site. Seriously, worth learning to do properly, along with periodic MySQL/phpMyAdmin backups for safe keeping!

The Envato toolkit has never quite worked right for us, so typically best to do updates via FTP so you can take full site backup same time in case you need to “roll back,” and also to ensure everything uploaded properly.

Highly recommended to do updates via FTP, as many folks the past 3 years I’ve been around here have had numerous problems with broken sites using the Envato updater.

Just a suggestion.

Also, Google is super useful to do searches like
“what happened to envato toolkit”

e.g.,
https://forums.envato.com/t/envato-market-wordpress-plugin-beta/21639

http://envato.github.io/wp-envato-market/

QUOTE: “I’m excited to announce the new Envato Market WordPress Plugin. When installed into WordPress the plugin notifies buyers of updates to their Envato purchased themes and plugins, and allows installation of updates directly from within WordPress. We are initially launching the plugin as a beta in order to get feedback from buyers and authors on usability and likeliness to use.

The new plugin replaces the Envato WordPress Toolkit which uses the old API and will therefore be decommissioned along aside it early next year. There are some key differences between the toolkit and the new plugin, namely; the new plugin updates both themes and plugins, it uses the new API with OAuth, it updates itself when a new version is available and doesn’t require authors to integrate a complicated library into their items.”

• This reply was modified 9 years by simchris.

Always good to check the changelog included with new version of theme update, as that is likely best place to check on “updated for PHP7 compatiblity…”

Also, good to have hosting provider that allows you to chooser PHP 5.6 or 7x from your hosting panel (Plesk, CPanel, etc.), so you can “try” PHP7 and if nothing works, go back to 5.6x.

Also; with Yoast and other major plugins it is always useful on update/install to

a) resave permalinks
b) clear transients with wp-optimize
c) go through ALL the settings panels in Yoast to make sure default settings don’t conflict with your site setup or other plugins which might do the same thing (e.g., if you already have a sitemap creator, don’t turn on the Yoast version; etc.)

RTFM: https://codex.wordpress.org/Hardening_WordPress

Again, “theme” does not allow hacking; your WordPress setup and user access levels, allow hacking. For example you should have the ability to edit core theme and WP files “off” for all users except super user. You should not have your superuser named “admin.” Etc.

Helps to read the WordPress docs on how to use, secure, manage WordPress.

WordPress is the “car” in your analogy, and the theme is only the paint color and stereo. It doesn’t drive your site, it only changes how it looks and what kind of speakers you have inside. The main WordPress files allow publishing pages; the theme only offers “styles” to change that.

Theme is not responsible for “locking down” WordPress.

Hope you take that as constructive criticism.

You might try, just for reference purposes, validators for the modern semantic web:

The old W3C checker only works on legacy HTML/XHTML docs, and not modern HTML5/semantic elements.

TRY

https://validator.w3.org/nu/

https://html5.validator.nu/

and, of course:
https://search.google.com/structured-data/testing-tool

• This reply was modified 9 years by simchris.

Main menu is under appearance, menus.

Probably going through all the docs section by section useful.

Disable pingbacks in wordpress settings.

Look like they are from your ads.

We can run the theme with zero issues; since moving to php 5.6 from 5.4, which was main issue on our system.

So, perhaps your author password got hacked and then that hacker uploaded files to your server?

Theme cannot upload or post — your WordPress install does that.

Hopefully you have cleaned your site, and changed all your account passwords to “strong” required passwords.

Not my theme, just 20 year webdev expert and 11 years on WordPress.

So, make sure you do clean install of WordPress, thenes, and plugins, as I suggested — this means REMOVE current WP folders, plugins, themes, and upload CLEAN copies; reset ALL passwords; check htaccess and wp-config.php and root for any suspect php files.

Only you can fix your compromised website, not fault of the theme.

The theme doesn’t allow viruses to post on your site.

You should make sure you have proper security setup for your WP install per the WordPress.org docs on “hardening WordPress,” you should remove any pirate software or plugins being used; remove any plugins “found on the web,” change your main username/password, install https/SSL on your site, scan your site with the free SECURI site scanner, perhaps consider doing clean install of WordPress; remove all plugins and old themes you’re not using, as they are security risks.

https://sitecheck.sucuri.net/results/pavlikeni.com/

If you install a “Demo with content,” that loads example content for those making site from scratch and without any existing content. Read the friendly instructions.

Opera browser works, but not Opera ‘mini’ … 🙂

There is no virus in the theme files from ThemeForest.

Your PC might be infected and thus when uploading to your server might be infected.

Probably good to look at your wp-config.php file ?

Note that some people are asked to re-login to Facebook if from mobile IP or if not recently logged in. This has nothing to do with the theme — meaning, when somebody is “sent” to FB to “like” something, they need to be logged in — this is handled on the FB system, NOT by the theme.

Trick to finding official WordPress docs info:

Google :: wordpress codex edit wp-config

https://codex.wordpress.org/Editing_wp-config.php

https://codex.wordpress.org/Editing_wp-config.php#Increasing_memory_allocated_to_PHP

For advanced use, it’s good to “unhook” the fonts from being enqueued in the theme functions file, and you can combine them as so:

https://fonts.googleblog.com/2010/09/optimizing-use-of-google-font-api.html

for advanced users, you actually capture the CSS from google and put at top of you style.css file.

I cover this a bit in my long winded tutorial thread on optimization in the docs > tutorials > DIY/best of forums

That might not help, but perhaps give you juice to go on an adventure on learning to “super optimize” Google font loading fpr best pagespeed (how I get 100/100) 😉

We went through this in 2013 when trying to use Amazon S3, and even with a sub-domain for images setup as cdn.oursite going to the image bucket, Google didn’t quite know what to do with stuff. Fact is they like to still ‘scrape’ the image from the page, even if it’s effectively in your news sitemap XML file properly. You may also find, putting two images in a post, specifying one as primary that shows in OG, twitter and XML as “the image,” they may scrape different one on the post. Kinda stupid there.

Fact is they still use fall back “content scraper” in tandem with reading the news map XML file you put into your search console.

Great that you got it sorted! 🙂

Because WProcket minification of javascript usually breaks it. It’s almost impossible to “auto-minify” javascript.

Google has some help on this topic, and I believe I have some examples of how to do this manually in my long winded optimization tutorial thread found in the docs > tutorials > DIY > best of forums.

Theme devs often don’t minify all the files, as a buyer might want to edit/change something which is very very hard to do from compressed version without comments.

However, you can easily do this yourself with an online compressor tool recommend by Google; you simply copy the file, paste into compressor, paste optimized version into file and upload on server over the original file. Shazam.

If you’re unable to find my optimization thread, here is link to compress the JS file(s) you wish to optimize manually (you will have to do again with each theme update!).

http://closure-compiler.appspot.com/home

Good luck!

See the WordPress.org codex (the ‘docs’ for WordPress), on how to edit the wp-config.php file to increase base memory limit; WP defaults to 40M, and it should be 96M or higher to use Visual Composer.

Make backup of the custom CSS in the theme panel; make export of settings.

Keep log of any core files you changed, as you will need to make the same changes to the new files in new version of theme.

Using theme on ten sites, not having any such issues.

Go to the ThemeForest account, go to your downloads, simply download the file(s). The latest version and changelog info can be found in the main “all files” download zip. 🙂