Development

Today, we have some great news to announce to our Parallax theme customers. Parallax, one of most popular selling themes has been updated with some new cool features to make the theme even better!

The new features added are:

• A fullwidth option in Section posts.
• Section posts now have the option to display either a message, video, or slider.
• Options to hide section title and subtitle.
• Animated progression circles to display progress and awesome icon font functionality.
• Social media icons and skill set percentage bars for team members in the Team section.
• Progress bar shortcode that can be used on any Post or Page.

All these new features can be seen on our working demos. There are so many new features, we had to create two demos for you!

• Demo #1
• Demo #2

So, if you are a Parallax user, what are you waiting for? Upgrade for free today!

Hooks, which are technically called WordPress Action Hooks, allow users to insert their own custom executable code into WordPress. Hooks can be extremely powerful saving you time and money in development costs. To see examples of what Hooks can do, we have created a demo area to illustrate the power and convenience of Hook.

In the past, if a user wanted to add custom code via a Hook, they would have had to create a custom-functions.php file for their Themify theme. Not anymore!

Introducing Hook Content:

With release of Themify Framework 1.7.3, Themify has given users the power to add their custom code via Hook Content without the need of creating a custom-functions.php file saving you time. Using the Themify Framework Panel interface, you can now easily create Hooks in a matter of a few clicks. You can use Themify’s Shortcodes to use Themify pre-existing functions such as Slider, Twitter, Map and much more! Also, it will save you hours of time with debugging code as you won’t need to sift through lines and lines of code.

To learn more about Themify’s new amazing feature, read our Hook Content documentation.

Here at Themify, we are proud to announce that we have added some cool new and enhanced features to our existing Framework.

360+ Social & Web Icons

Our first new feature is the addition of Icon Fonts to our Social Links widget. We have added:

• 360+ FontAwesome icons
• the ability to custom color each individual icon and their background
• icons can appear in three sizes: small, medium or large

Menu Icons

For our second new feature, we have also added Icon Fonts to WordPress Menus. So, if you always wanted to add a little house icon next to Home on your menu bar, now you can! To access this new feature, go into your WordPress Admin > Appearance > Menus and in each menu panel you should see a Icon field.

Builder Custom Styling

For our Builder lovers, we have a new feature for you too! You can now custom style the row and module individually (font, padding, margin, background, and border), giving more control over the structural design of your webpage.

Responsive Lightbox

And finally, we have replaced the old lightbox with a new one that not only is fully responsive but also offers better performance on desktops, tablets and mobiles than the previous version.

We hope your enjoy the new features!

In an effort to resolve the vulnerability issue found in the older versions of Themify framework before 1.2.2, we've released a new update which will delete the legacy file 'themify-ajax.php' and any unknown files in the theme 'uploads' folder. This update (framework 1.6.3) is intended to save your time from removing the legacy file manually as posted here. Themify users are recommended to upgrade to this version. To upgrade your theme/framework, go to the Themify option panel page and you should see the upgrade notice. After the update, please verify if the file 'themify-ajax.php' still exists by checking the file list in WP Admin > Appearance > Editor. You may also use a FTP software to check the file in 'wp-content > themes > [themify_folder] > themify' folder.

NOTE: this vulnerability issue only affects the themes installed with Themify framework version before 1.2.2, released on November 9, 2012. Even if your theme is not affected, it's recommended that you update to this new version.

REMEMBER: if you have any inactive/old Themify theme sitting on the server, download the theme(s) to your computer for backup and delete it on your server. This fix will only apply to the active Themify theme.

As was mentioned in the previous post, there were some issues regarding the existance of themify-ajax.php, which was a legacy file used in a very old framework version, leading to a vulnerability. In this post we'll address how to completely clean the theme folder. If you find the legacy file themify-ajax.php file in the theme folder, follow these steps on how to fix it:

1. Download an updated theme zip from your member area and unzip it on your computer. We will upload it later by FTP.
2. Access your site through FTP and navigate to the Themify theme folder in wp-content/themes/
3. Download the current theme folder on the server to your computer for backup.
4. You have 2 ways to delete the old files:
   • A) if you have made changes to the template files (we recommend to create a child theme for template modification) you can delete the uploads directory inside the theme and the themify-ajax.php file inside the themify folder, also located inside the theme. If you continue having issues, you should delete the entire theme folder.
   • B) if you haven't made any changes to the parent theme, great! you can delete everything. However, make sure you haven't created the files custom-functions.php, custom-modules.php, custom-config.php or custom_style.css. If you did, you can upload these files again from the backup folder.
5. Whatever method you have chosen in the previous step, themify/themify-ajax.php and uploads folder inside the theme should now be gone. You can now step out of the theme folder, and upload by FTP the updated theme you downloaded from your Themify membership account.

NOTE:

The file themify-ajax.php was retired in framework version 1.2.2, released in November 9, 2012, so only if you started using Themify themes at a later date you're safe and no action is required. If you use Themify themes since an earlier date or are unsure about it, check your installation following the steps outlined above.

Updated Fix (Nov 14, 2013):

We've released a new framework update to fix this issue. Please read this post and upgrade your theme.

Hello Themify users,

We have recently received and confirmed reports of a vulnerability that exists within the Themify framework, and we would like to shed some light on the situation and ensure that you take the proper steps to protect yourself from this vulnerability.

The Low Down

In older versions of Themify framework, we used to include an unsecure file called 'themify-ajax.php', that was fixed and removed in framework version 1.2.2, released on November 9, 2012. However, users that upgraded through the auto-upgrader did not have this file removed from their server, and we have recently received several reports of intruders using ‘themify-ajax.php’ to upload files to users servers.

Am I Affected?

This vulnerability only affects users that installed a Themify theme with framework version before 1.2.2, released on November 9, 2012 (you can find the changelogs here).

To be absolutely sure, check for the file 'themify-ajax.php' on your server by following these steps:

• connect to your FTP server
• from the root WordPress folder, go to 'wp-content' folder
• go to 'themes' folder
• go to [themify_theme_folder]
• go to 'themify' folder
• and check for the 'themify-ajax.php' file (note that the 'themify-wpajax.php' is the fixed version in 1.2.2)

If you can’t find it, you’re safe.

However, if you see it, you will have to download the latest theme from the member dashboard and replace entire theme folder. Here is a tutorial on how to use FTP to replace the theme folder. You must absolutely do this in order to prevent this vulnerability from being exploited on your website.

What next?

Once you have replaced your theme folder entirely, you are safe. If you are unsure and need help, please contact us immediately and we will respond as soon as possible.

We know that this vulnerability is an inconvenience and an issue that should never have happened in the first place, and we’re very sorry that it did. We hope that you can trust us to make issues like this known as soon as possible, and to have a solution in place for all of our users.

As we mentioned, please do not hesitate to contact us with any concerns or support requests. We will do our best to respond as soon as possible during this very important time.

Thank you so much for using Themify.

Update (Nov 13, 2013):

Please read this post for more detail on how to remove the legacy file 'themify-ajax.php'.

Updated Fix (Nov 14, 2013):

We've released a new framework update to fix this issue. Please read this post and upgrade your theme.