Any update soon?

I’m trying to access the support website, and I’m encountering the following error:

{ “error”: “The HTTP method and path you requested is invalid. Please check the API documentation at https://build.envato.com/api/ and ensure that you’re using a valid path with the correct method.”, “reason”: “not-found” }

wonderfull script but missing a fully android app , is it plan ?

Can we purchase an extended license and use it on unlimited domains?

I changed my domain and try to active my license, but I cannot deactive the license by sending ticket because the service is expired. please help to reset it.

i am waiting for ticked support from 2 weeks ago on September 23, 2025 at 12:10pm

Hi, I have to reset my license as domain has changed. I have sent an email can you please check. Thanks

We have a problem in bing search engine “Many pages with duplicate titles”

mydomain.com/public/xxxxxx mydomain.com/xxxxxx

We have Disallow: /public/ in robots.txt but not work So how can we Disallow the url from bing

Hi, all sliders are static, how can you make it auto-slide?

Subject: Critical Security Vulnerability Report: Malicious Code in “UltraNews – Laravel System” Leading to Domain Hijacking

To the Development Team of UltraNews,

I am writing to report a critical security vulnerability discovered in your product, “UltraNews – Laravel Newspaper, Blog Multilingual System with support AI Writer, Content Generator,” which appeared immediately after an update to a newer version.

My website, my-website.com, was built using this system. After performing a routine update, I discovered that my entire site was being compromised by malicious code embedded within the new source. This code systematically replaced my legitimate domain with an unauthorized third-party domain: https://checkip.online.

Vulnerability Description:

The core issue is that the updated version of the software appears to contain malicious scripts. These scripts perform an aggressive “search and replace” operation across the entire application, hardcoding the attacker’s domain (https://checkip.online) into all critical paths, including core configuration, static assets, and the database.

Evidence and Impact:

Hardcoded URLs: Every generated URL within my website’s source code—including asset paths (CSS, JS, fonts), internal links, and canonical URLs—was pointing to https://checkip.online instead of my own domain.

Database Infection: The malicious script actively created and modified entries in my database. Specifically, tables such as request_logs were populated with thousands of records containing URLs from the https://checkip.online domain.

Framework-Level Infection: The attack penetrated the framework core, altering dynamic data in real-time. For instance, session files located in storage/framework/sessions were being written with the attacker’s domain, hijacking user sessions as they were created.

Complete Site Hijacking: Because all links, resources, and even dynamic sessions were pointing to the malicious domain, my website effectively became a mirror of https://checkip.online, leading to a complete loss of control over my site’s identity.

Severe SEO Penalties: As a direct result, Google Search Console flagged my website for “Duplicate content: Google chose a different canonical URL than the user.” Google correctly identified that my content was duplicated but incorrectly chose the attacker’s domain as the original source, causing my legitimate domain to be de-indexed and severely damaging my search rankings.

Conclusion:

This is a sophisticated attack that infects the site at a fundamental level. The fact that this vulnerability surfaced immediately after an official update raises serious concerns about the integrity of the update package or the new version itself. This suggests a potential supply chain attack or a compromised development environment.

I strongly urge you to conduct an immediate and thorough audit of your official source code, repositories, and update packages to identify and remove this malicious code. Please also consider issuing a security warning to all your customers about this potential threat. This vulnerability is causing significant financial and reputational damage to your users.

Thank you for your attention to this critical matter.

Sincerely, A concerned user.

My domain name has been deleted. I’m typing a new domain name, but it’s not being accepted. Please reset my domain name.

Hi, Post sales ? – We r currently setting up the OpenAI integration in the settings for the AI Writer feature. I have already entered my OpenAI API key, and I am 100% sure that the key is correct. However, whenever I try to generate content using the AI Writer, I consistently receive the following error:

Service OpenAI Temporarily Unavailable. Please try again later. Incorrect API key provided: sk-proj-**PY0i. You can find your API key at https://platform.openai.com/account/api-keys.

I’ve double-checked the key on my OpenAI account and confirmed it is active. The format looks like this: sk-proj-xxxx… (newer OpenAI project-based keys).

Can you please confirm if the script supports the latest OpenAI API keys (sk-proj-) or if I need to use a different type of key? If so, kindly advise how to properly configure the system to accept the correct key. Thank you for your assistance.

I there a theme that is dark by default?

Before buying I didn’t pay attention that the author’s last comment was 2 months ago. Does anyone know if support is still available?

Please help. Debug mode is not working and there is no laravel.log file. Are these the issues or is it supposed to be like that?

Hello, I would like to know if it is possible to change the background colors of the pages and blocks, for example change the color of the menu block? If so, can you tell us where to do it please?

I changed my domain address but it does not accept the license key I bought in the past. My support period is over but I cannot install and reset it.

Hi, I have a legal license for the script, but it’s currently broken due to a license verification issue. The validator fails with a cURL error 6: Could not resolve host: license.thesky9.com, which is causing a 500 error on my site. Please provide an urgent fix or alternative method to validate the license. This is affecting production. Thank you.

please help to reset the license, i been using on the same domain, now it wont allow me to reinstall the code on the same domain,

Hi, I just bought this script and it wont upload images, it says The uploaded file failed to upload. wha to do?