Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BP Ajax Registration

  • Participant
    Level: Initiated
    Posts: 8
    mxracer388 on January 5, 2017 at 4:56 pm #6935

    Interesting. Thank you for looking into this.

    I reactivated the file editor in wordpress. Can you direct me or can you edit the files of question?

  • Keymaster
    (BuddyDev Team)
    Posts: 24733
    Brajesh Singh on January 7, 2017 at 10:16 am #6943

    Hi,
    Thank you.

    Please allow me to take care of it today. I will post back after my changes.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 8
    mxracer388 on January 10, 2017 at 6:31 pm #6971

    Hello, I have not heard back. did you manage to fix this?

  • Keymaster
    (BuddyDev Team)
    Posts: 24733
    Brajesh Singh on January 10, 2017 at 9:12 pm #6975

    Hi,
    I am sorry for the delayed update.

    I have done 2 changes on the server

    1. I have disabled the feed Them social since I did not see the settings for it being updated and it was loading script at multiple places

    2. I have also slighly changed (1 line) in cherry theme to avoid loading the magnific popup when user is not logged in(Because it is already loaded by other plugin)

    3. Please add the class “bp-ajaxr” to the link and it will work as expected. I tested by adding the class in browser.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 8
    mxracer388 on January 22, 2017 at 6:11 am #7052

    thank you.

    Will updating the theme or any plugin erase what you have done?

    Could you send more specific details on the changes so I can replicate if they get overwritten for whatever reason or to disable?

  • Keymaster
    (BuddyDev Team)
    Posts: 24733
    Brajesh Singh on January 23, 2017 at 8:33 am #7066

    Hi,
    You are welcome.

    I don’t remember the name of the file now(It was perhaps asset-loader or script-loder)

    You should search for magnific-popup.js and you will see the line enqueuing it.
    I just changed that to

    

if( is_user_logged_in() ) {
that line here

}

    That does it.

    regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved