v1.7x-v8x-v9x Element Flow PrestaShop Site Builder for PrestaShop 9 and 8 and 1.7 V2.2.3 (Newest 20.08.2025)

Anvar6120

Well-known member
Elite
XNullUser
Joined
Apr 9, 2022
Messages
37
Reaction score
358
Points
53
NullCash
2,193
Element Flow is a professional PrestaShop site builder, with it you can build most PrestaShop site pages on the front-end using the drag & drop interface.

V2.2.3
Auguest 20, 2025


- Fix: The accordion style of a tab on mobile doesn't work.
- Fix: The page background under the page settings isn't saved.
- Tweak: Add a custom ratio setting to the video widget.
- Tweak: Improved compatibility with the easy filter module.

This module is posted for informational purposes only!
If the module meets your needs, please purchase it from the developer!


DEMO
 

Attachments

  • stsitebuilder.zip
    11.2 MB · Views: 42

nizaratie

Member
XNullUser
Joined
Dec 23, 2022
Messages
278
Reaction score
0
Points
16
Location
sinegal
NullCash
20
Thank you very much for sharing. Looks nice.
Post automatically merged:

you share not working module :(((((
Post automatically merged:

DON'T DOWNLOAD NOT WORK
Post automatically merged:

it is work have conflict with crative element (y)
 
Last edited:

unique

Well-known member
Diamond
Elite
XNullUser
Joined
Dec 12, 2020
Messages
3,048
Reaction score
493
Points
83
NullCash
922
Thank you very much for sharing this modul
 

Anvar6120

Well-known member
Elite
XNullUser
Joined
Apr 9, 2022
Messages
37
Reaction score
358
Points
53
NullCash
2,193
Thank you very much for sharing. Looks nice.
Post automatically merged:

you share not working module :(((((
Post automatically merged:

DON'T DOWNLOAD NOT WORK
Post automatically merged:

it is work have conflict with crative element (y)
Element Flow is also based on Creative Element.
Tip: Remove the old module that uses Creative Element.
 

IAN

Member
XNullUser
Joined
Jan 19, 2022
Messages
169
Reaction score
1
Points
18
NullCash
29
Thank you very much for sharing. Looks nice.
 

cmrcmr

Well-known member
Master
Diamond
Elite
XNullUser
Joined
Sep 6, 2019
Messages
1,124
Reaction score
1,768
Points
113
NullCash
6,719
Muchas gracias por compartir este modulo :)
 

yog78

Active member
XNullUser
Joined
May 25, 2021
Messages
1,436
Reaction score
8
Points
38
NullCash
3,969
Thank you very much for sharing this module.
 

eson

New member
XNullUser
Joined
Aug 26, 2025
Messages
9
Reaction score
0
Points
1
Location
italy
NullCash
4
Element Flow is a professional PrestaShop site builder, with it you can build most PrestaShop site pages on the front-end using the drag & drop interface.

V2.2.3
Auguest 20, 2025


- Fix: The accordion style of a tab on mobile doesn't work.
- Fix: The page background under the page settings isn't saved.
- Tweak: Add a custom ratio setting to the video widget.
- Tweak: Improved compatibility with the easy filter module.

This module is posted for informational purposes only!
If the module meets your needs, please purchase it from the developer!


DEMO
very very thanks for your contribute. you are a very friend
 

hxcode

Well-known member
Master
Diamond
Elite
Joined
Aug 16, 2020
Messages
3,916
Reaction score
465
Points
83
NullCash
23
Thank you very much for sharing this module!
 

katsou

Active member
Elite
XNullUser
Joined
Apr 6, 2023
Messages
87
Reaction score
109
Points
33
Location
germany
NullCash
1
Thank you very much for sharing this module
 

plamcho

Member
XNullUser
Joined
Sep 27, 2020
Messages
219
Reaction score
1
Points
18
NullCash
23
Fantastic module! I'm using it with the Prestashop classic theme and it works perfectly. Thank You.
 

upgreydd

New member
XNullUser
Joined
Aug 28, 2025
Messages
9
Reaction score
1
Points
3
Location
Poland
NullCash
24

Security Report – stsitebuilder.zip​


Summary:
The package was analyzed for potential security issues, including obfuscated code, use of dangerous functions, hidden connections to external servers, and repository artifacts. Below are the findings.


1. Obfuscated Code​

  • File: stsitebuilder/libs/elementor/modules/templates/module.php
  • Contains an eval(base64_decode(...)) block.
  • After decoding, it defines a token validation function. No clear evidence of malware, but the obfuscation makes auditing harder and raises a red flag.
PHP:
function validateToken($key = '', $type = 0) {
    $key = trim($key);
    if (empty($key)) {
        $time = strtotime('+30 minutes');
        // ...
        return Tools::passwdGen(4) . ...;
    } elseif (strlen($key) == 32) {
        switch ($type) {
            case 0:
                // ...
                return true / -1;
            case 1:
                // ...
            case 2:
                // ...
        }
    }
    return false;
}


2. External Connections​

  • File: stsitebuilder/classes/StModuleLicense.php
  • Uses cURL to communicate with remote servers (license and update checks).
  • Current $api_url and $dl_api_url are set to localhost, but the logic is clearly intended to connect to vendor endpoints.
  • Example: references to CURLOPT_REFERER => "https://www.sunnytoo.com" and update/download scripts.


3. External Resources in Front-End​

  • Multiple references to third-party domains:
    • fonts.googleapis.com (Google Fonts)
    • fontawesome.com (icons)
    • youtube.com / youtube-nocookie.com (video widgets)
    • Documentation/help links to elementor.com


4. SVN Repository Artifacts​

  • The archive contains .svn directories with metadata (wc.db, pristine copies, etc.).
  • Example path: other-setting/childtheme/.svn/...
  • These could expose internal code or configuration if deployed without proper restrictions.


5. Use of Dangerous Functions​

  • No usage of exec, system, shell_exec, passthru, proc_open, or remote include/require.
  • No signs of typical webshell patterns (e.g., eval($_POST['...']), base64+gzinflate payloads).


Conclusion​

  • One obfuscated block found (eval(base64_decode(...))).
  • License system with cURL intended to connect externally but nulled/disabled.
  • Third-party resources embedded in front-end.
  • SVN artifacts present in the package.
  • No evidence of direct backdoors or malicious shell commands.
 
Top