Installation & customization guide.

Quick start

File structure

Neravo/
├── index.html
├── index-video.html
├── index-image.html
├── index-reel.html
├── home-demos.html
├── assets/
│   ├── css/style.css
│   ├── js/main.js
│   ├── media/
│   └── uploads/               # created/used by Payo Studio
├── php/contact.php
├── payo-studio/               # optional universal HTML editor
│   ├── index.php
│   ├── install/
│   ├── api.php
│   ├── public.php
│   ├── assets/
│   ├── includes/
│   └── storage/               # protected config, overrides, backups
└── Documentation/index.html

Homepage demos

All home demos use the same fullscreen sidebar concept and modal content views for Services, Selected Work, Studio, Journal and Contact.

Media included in the customer package

The downloadable Main Files use an original procedural placeholder set so customers can replace media without licensing ambiguity. The placeholder files are intentionally simple, dark, softly blurred and slightly different from one another so the layout remains attractive while making it obvious that the final project should use the customer’s own imagery.

Manual editing

Text

Open the relevant HTML file and replace the existing text directly. Content views are stored inside <template> blocks such as view-services, view-work, view-studio and view-journal.

Images

Replace files inside assets/media/ or update each image src. Keep descriptive alt text for accessibility.

CSS

The visual system is in assets/css/style.css. Global colors use CSS custom properties defined in :root.

JavaScript

Navigation, modal workspace, portfolio filtering, counters, responsive interactions and animations are in assets/js/main.js.

Optional module

Payo Studio — Universal HTML Page Builder

Payo Studio is designed as a theme-independent page builder that can be copied into other HTML projects. It uses a file-based override layer instead of requiring a database or rewriting content on every save.

Install Payo Studio

Using the live page builder

Administrator password

After installation, open the Security section in the Payo Studio dashboard to change the administrator password. The current password is required.

How the editing layer works

Element changes are stored as JSON overrides keyed by page and selector. Reusable block insertions are stored as page layout operations. The original source remains readable, and installation backups are retained.

Rows & Columns

Choose Add Section in the live toolbar to create a new section before or after an existing block. Layouts are selected visually and generated by the authenticated server from a fixed whitelist.

Reusable Sections & Addons

Drag & drop

Open Library in the live editor. Drag a Section to a before/after insertion line, or drag an Addon inside a highlighted container. The inserted block can then be edited normally and removed from the page when no longer needed.

Security

Reusable HTML is not trusted just because it comes from the browser. The server sanitizes each saved block with a DOM allowlist. Scripts, iframes, forms, inline event handlers, IDs and unsafe URL schemes are removed. Payo Studio intentionally does not provide an unrestricted HTML/JavaScript code editor.

For the full builder documentation, open Documentation/Payo-Studio.html.

Image uploads

Images uploaded in the editor are written to assets/uploads/YYYY/MM/ with generated filenames.

SVG and arbitrary file uploads are intentionally disabled by default.

Changing global colors

During installation, Payo Studio scans CSS files inside assets/css/ for custom properties containing color values. In live editor mode, choose Theme colors from the top toolbar.

For Neravo, the main accent is --accent: #c8ff4d. Global color overrides are stored separately from style.css and applied to every connected page.

Security model

Payo Studio is intentionally designed without arbitrary PHP uploads or an unrestricted code editor. Reusable block HTML is accepted only through a server-side allowlist sanitizer.

Server notes

Apache

The editor includes payo-studio/storage/.htaccess with deny rules and hardens the public image-upload directory against script execution on Apache. Make sure your Apache configuration permits .htaccess overrides for this directory.

Nginx

Add a location rule that denies direct browser access to the Payo Studio storage folder:

location ^~ /payo-studio/storage/ {
    deny all;
    return 403;
}

Permissions

A common starting point is directories 755, files 644, with the web server user owning or having write access only where needed. The installer needs temporary write access to HTML pages to inject the bridge. After installation, return HTML files to normal read-only web permissions; ongoing editor writes only need payo-studio/storage and assets/uploads.

HTTPS

Use HTTPS in production. The editor automatically marks its session cookie Secure when HTTPS is detected.

Contact form

The included contact form posts to php/contact.php. Open that file and change both the recipient and From email addresses before publishing. The handler uses fixed configured addresses rather than deriving mail headers from the HTTP Host header. The contact handler is independent of Payo Studio.

Credits & external resources

Neravo uses a local system-font stack, so the customer package has no remote webfont dependency. Review assets/media/MEDIA-MANIFEST.txt for the included original procedural placeholders. No AI-generated preview artwork is included in the customer Main Files package.

Useful official references for security and marketplace preparation:

• Envato — Themes Item Preparation & Technical Requirements
• OWASP — File Upload Cheat Sheet
• OWASP — CSRF Prevention Cheat Sheet
• OWASP — Authentication Cheat Sheet

Troubleshooting

The installer says the root is not writable

Temporarily allow the PHP/web-server user to modify the HTML pages. After installation, normal editing is stored in Payo Studio's storage layer.

The editor does not open from a local file

This is expected. Payo Studio needs PHP sessions and API endpoints, so use localhost/XAMPP or a web server.

An image upload is rejected

Confirm Fileinfo and GD are enabled, the file is JPEG/PNG/WebP, under 6 MB and below the dimension limit.

Colors do not appear in the Theme panel

The generic detector exposes CSS custom properties with color values. A theme that hardcodes colors instead of using variables can still use per-element color controls.

Removing Payo Studio

The static HTML theme remains the source of truth. If the editor folder is not used, the original theme remains usable. To remove an installed bridge cleanly, restore the backed-up HTML files from payo-studio/storage/backups/ before deleting the editor folder.