Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Activity plus “remote image option” creates unlimited URL input fields.

Tagged: 

  • Participant
    Level: Initiated
    Posts: 11
    webfriend on May 13, 2023 at 10:20 pm #49502

    Hi Brajesh

    Using activity plus reloaded. There is an issue with the
    “add remote image” option.

    The number of images that can uploaded to a single post
    can be tweeked here.
    ——————————————————————–
    bp-activity-plus-reloaded.php
    ——————————————————————–
    // Override image limit in wp-config.php.
    if ( ! defined( ‘BPFB_IMAGE_LIMIT’ ) ) {
    define( ‘BPFB_IMAGE_LIMIT’, 1 );
    }
    ——————————————————————–

    With activity plus limited to 1 , it will still create
    multible URL input forms everytime the user clicks
    the ” add image url ” button

    If its clicked 100 times, 100 input forms will be
    created by the browser.

    Do you have some way of fixing this ?

    I appreciate your help.

    Thank you
    webfriend

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 14, 2023 at 10:28 am #49504

    Hi,
    Thank you for notifying us.

    Please allow us to look into it and push and update next week.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 15, 2023 at 6:39 pm #49524

    Hi webfriend,
    Hope you are doing well.

    Please upgrade to 1.1.0. The issue should be resolved.

    Please let me know if it works for you or not?

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 11
    webfriend on May 18, 2023 at 8:26 pm #49561

    Hi Brajesh

    WOW ! Thanks , I will try it and post .

  • Participant
    Level: Initiated
    Posts: 11
    webfriend on May 18, 2023 at 8:42 pm #49562

    Hi Brajesh

    Activity Plus reloaded
    version 1.1.0.

    Can’t find it ? could you place it on the download
    page.

    https://buddydev.com/plugins/bp-activity-plus-reloaded/

    Thank you
    webfriend

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 19, 2023 at 8:38 pm #49571

    Hi webfriend,
    My apology,
    We pushed it on https://wordpress.org/plugins/bp-activity-plus-reloaded/
    I will add it to our site too.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 11
    webfriend on May 22, 2023 at 9:05 pm #49583

    Hi Brajesh

    Activity Plus reloaded
    version 1.1.0.

    Tryed the new plug.
    ———————————————————————
    bp-activity-plus-reloaded.php

    // Override image limit in wp-config.php.
    if ( ! defined( ‘BPFB_IMAGE_LIMIT’ ) ) {
    define( ‘BPFB_IMAGE_LIMIT’, 1 );
    }
    ———————————————————————
    When this code is changed to a new number.
    The preview and the post adjust to the new number
    with a message warning when trying to upload more.
    Great !

    There is a issue with the remote image.

    The preview will create one more input form and image
    than the coded number limit.
    —- But only the correct number will be posted.

    The glitch is in the preview. Maybe, you guys could
    fix that and repost 1.1.0 ?

    Thank you
    webfriend

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 22, 2023 at 9:55 pm #49586

    Hi,
    Thank you for the reporting. It was a mistake.
    We will push an update in next couple of days and let you know here.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 11
    webfriend on May 31, 2023 at 2:56 am #49634

    Hi Brajesh

    I’m a bit curious.– Did you guys get a chance to fix
    activity plus 1.1.0 ?

    Thank you
    webfriend

    • This reply was modified 1 year, 6 months ago by webfriend.

You must be logged in to reply to this topic.

This topic is: not resolved