Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Anonymous plugin – Activity as friend

Tagged: , ,

  • Participant
    Level: Enlightened
    Posts: 74
    Katrine Spencer on December 31, 2024 at 1:38 pm #54435

    Hello

    I found yet another issue with the Anonymous plugin during testing.
    When a member shows “activity from fiends” in the activity stream – the anonymous posts comes up on the list.
    This is an issue since the member that are friends with the one who made an anonymous post might be able to figure out who they are.

    This should be fixed – thank you! 🙂

  • Participant
    Level: Enlightened
    Posts: 74
    Katrine Spencer on December 31, 2024 at 1:59 pm #54436

    Also – this made me aware that there is also an issue with your “BuddyPress Activity Privacy” plugin.
    If a member created activity and marked it for “followers/friends only” and a user go to their own activity page and under the “friends” tab – then ALL activity is in there too. Even if it has been marked as “private/for followers only”. The Anonymous posts are also in here too.

    This would need a pretty urgent update.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24722
    Brajesh Singh on January 1, 2025 at 1:06 am #54438

    Hi Katrine,
    Thank you for the report.

    I assume you are referring to sitewide activity stream. It was a conscious decision as we are storing flag for marking activity in activity meta .

    Using meta query on sitewide activity stream is not efficient and that’s why we let it that way. I will need to work on an option to manually enable skipping it when the friends filter is enabled.

    About “BuddyPress Activity Privacy”, I am sorry, This plugin is not supported outside Community Builder pro and It is not available for downloads without access to Community Builder theme(It was a mistake if it was available for download somehow). The reason I am not supporting is every theme has their own way of implementing things and The time invested in supporting is not justified. That’s why we made a few plugins only available with our theme not beyond that.

    For the first issue, I will post in next 24 hours.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 74
    Katrine Spencer on January 1, 2025 at 10:31 am #54446

    Hello Brajesh

    It would make sense for the Anonymous activity to only show up in the “main activity feed”. Also the user who posted the activity should be able to see their own posts on their personal activity feed. I’m not sure if it is possible to somehow “hide” anonymous activity if they’re on any of the other sub-tabs? – if that makes sense? 🙂

    Is there any way I can get support on this (privacy plugin?) – I need this to work even if I have to pay my way out of it lol.. I’ve tested some custom code myself, but I can’t seem to make it work like inteded.

    Thanks! 🙂

You must be logged in to reply to this topic.

This topic is: not resolved