Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Request for password on account deletion

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 3, 2019 at 1:50 pm #23788

    Hello,

    Please how can I enable buddypress users to verify their account password before they are allowed to delete their account.
    There should be a form of security confirmation before a user proceeds to delete his account.
    For example,

    1. the user clicks delete account on the setting page
    2. user inputs his current password in the password input field(for security confirmation)
    3. user clicks the (delete account) button to successfully delete account
    4. If the password is wrong then the delete request should not be submitted followed by an error message

    Thanks

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 3, 2019 at 1:52 pm #23789

    This password confirmation field is currently available in settings > general to change new email or password.

    This feature could be helpful in various situations like logging in to buddypress account on a public cafe or laptop and forgetting to logout and another person(evil for unknown reasons) decides to delete your account, the password confirmation can prevent this.

    • This reply was modified 5 years, 5 months ago by Tosin.
  • Keymaster
    (BuddyDev Team)
    Posts: 24708
    Brajesh Singh on July 5, 2019 at 12:57 am #23857

    Hi Tosin,
    Thank you for the idea. I do like it.

    I did check the BuddyPress settings template and I don’t see any way(unless using js) to inject a field for entering password.

    That means, the settings template will need to be modified by the user. That’s why a generic plugin is not feasible currently.

    I and my team will be glad to post a blog post about it and share how to accomplish the same using some code(with how to modify settings page).

    Will that work for you?

    Thank you
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 5, 2019 at 3:47 am #23863

    Yes that is ok, but can you also pitch the idea to the core buddypress developers maybe this feature can be integrated into the future core versions of buddypress.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24708
    Brajesh Singh on July 6, 2019 at 8:00 pm #23900

    Thank you.
    Will do a post next week.

    Regards
    Brajesh

  • Participant
    Level: Master
    Posts: 222
    Mike (DesignServe) on July 7, 2019 at 12:26 pm #23907

    It’s a really good idea. Maybe there would be a way to redirect through a wordpress page where the password would have to be entered before going to the page with the delete button.

  • Keymaster
    (BuddyDev Team)
    Posts: 24708
    Brajesh Singh on July 10, 2019 at 4:23 am #24025

    Hi Tosin, Mike,
    Thank you both of you.

    We are going to see if we can get it in next release of BuddyPress.

    Regards
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on November 17, 2019 at 11:27 am #26488

    Hello,

    Do you think the buddypress team are going to implement this feature

  • Keymaster
    (BuddyDev Team)
    Posts: 24708
    Brajesh Singh on November 18, 2019 at 6:47 am #26510

    Hi Tosin,
    I haven’t checked it recently. I will check and update you.

    For custom theme’s It can be accomplished by copying the template and modifying it in the theme.

    Regards
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on May 26, 2021 at 10:58 am #38829

    Hello,

    Where you able to submit this feature request to the buddypress dev team?

    Thanks

You must be logged in to reply to this topic.

This topic is: not resolved