Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] After plugin activation -> all users lost

  • Participant
    Level: Initiated
    Posts: 8
    casper99 on September 23, 2018 at 6:44 am #17564

    Hi,

    after activating the plugin “BuddyPress Moderation Tool” version 1.0.4
    all users are hidden/lost. No users in search/friends list/online.

    After deactivating the plugin, all users are back.

    What happened?

  • Keymaster
    (BuddyDev Team)
    Posts: 24741
    Brajesh Singh on September 23, 2018 at 6:50 am #17565

    Hi,
    Welcome to BuddyDev Forums.

    I am sorry for the inconvenience.

    Are you using any other plugin for filtering members list? Also, which version of PHP, WordPress/BuddyPress are you using? Is the theme premium? If yes, which theme it is. Also, are you using database caching?

    I just enabled and checked again and it is working for me on BuddyPress 3.2. It can be some conflict.

    Please let me know and I will assist.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 8
    casper99 on September 23, 2018 at 6:58 am #17566

    Hi Brajesh,

    thank you for your quick reply.

    Software:
    PHP Version 7.2.5
    wordpress Version 4.9.8
    BuddyPress Version 3.2.0
    BuddyPress Moderation Tool version 1.0.4

    I am using a theme based on the “underscores theme”, which works well.
    BuddyPress Template-pack: “BuddyPress Nouveau” -> same problem with standard Template.

    other plugins:
    BP Profile Search
    BP Redirect To Profile
    BuddyPress Member Type Generator
    BuddyPress Members only
    WP Content Filter

    all above plugins were already deactivated, but users are still hidden.

    no database caching

    Regards
    Carsten

  • Participant
    Level: Initiated
    Posts: 8
    casper99 on September 23, 2018 at 7:04 am #17567
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24741
    Brajesh Singh on September 23, 2018 at 7:06 am #17568

    Hi Carsten,
    Thank you.

    It could be some issue with PHP 7.2 as the plugin is only tested upto PHP 7.0.32.

    Do you have debug enabled, if not, Please enable it for a temporary check. It can be done by following

    

define( 'WP_DEBUG', true ); // this line is already present, just change the value to true
define('WP_DEBUG_LOG', true );

    After that, Please visit members directory. I am guessing there is some php error on the user query filter which is happening on 7.2.

    Please let me know what you see in error.log file(in wp-content it will be created).

    If you are not comfortable with doing the above change, Please allow me 8-12 hours, I will check the plugin on php 7.2

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24741
    Brajesh Singh on September 23, 2018 at 7:08 am #17569

    Ahh,
    Thank you.

    I see. The the table creation failed due to mysql strict mode and that has been the root of the issue. Please allow me 30 minutes, I am putting an update that will work with strict mode too.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24741
    Brajesh Singh on September 23, 2018 at 7:47 am #17571

    Hi Carsten,

    There was an issue in our table creation statement which only appeared on some of the mysql version. It was related to a datetime field.

    Since the table were not created, the plugin started throwing too many notices.

    Please upgrade to 1.0.5. After upgrade, Please deactivate the plugin and reactivate it. It will create the tables which were not created earlier and will not throw any notice after that.

    Please let me know how it goes.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 8
    casper99 on September 23, 2018 at 8:12 am #17572

    Hi Brajesh,

    yes!!! After reinstalling with the new version 1.0.5, it works!

    Thank you for your great and very quick support!

    Regards
    Carsten

  • Keymaster
    (BuddyDev Team)
    Posts: 24741
    Brajesh Singh on September 23, 2018 at 8:15 am #17573

    Hi Carsten,
    Thank you for confirming the fix. I am glad it worked.

    I sincerely appreciate your patience.

    Have a great day.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: resolved