Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Buddyblog, images/media support.

Tagged: ,

  • Participant
    Level: Enlightened
    Posts: 55
    Peter Blom on December 4, 2015 at 6:15 pm #1862

    Been scratching my head a little on this topic. Using buddblog on a buddypress installation toghter with the simple frontend plugin. It all works as I belive intended, managed to limit categories with some lines in bp-custom.php. All very good so far.

    Installation is currently local as to just try it out/troubleshoot/betatest. Using the following:

    ===============================================================================

    WordPress Version: 4.3.1
    PHP Version: 5.5.12
    MySQL Version: 5.6.17
    Web Server: Apache/2.4.9 (Win64) PHP/5.5.12

    WordPress URL: http://localhost/smpc
    Home URL: http://localhost/smpc

    Content Directory: C:\wamp\www\smpc/wp-content
    Content URL: http://localhost/smpc/wp-content
    Plugins Directory: C:\wamp\www\smpc/wp-content/plugins
    Plugins URL: http://localhost/smpc/wp-content/plugins
    Uploads Directory: C:\wamp\www\smpc/wp-content/uploads

    Cookie Domain: Disabled
    Multi-Site Active: Yes

    PHP cURL Support: Yes
    PHP GD Support: Yes
    PHP Memory Limit: 256M
    PHP Memory Usage: 74.3M (29%)
    PHP Post Max Size: 3M
    PHP Upload Max Size: 64M

    WP Options Count: 214
    WP Options Size: 144.99kb
    WP Options Transients: 9

    WP_DEBUG: Disabled
    SCRIPT_DEBUG: Disabled
    SAVEQUERIES: Not set
    AUTOSAVE_INTERVAL: 60
    WP_POST_REVISIONS: 1

    Operating System: Windows
    Browser: Google Chrome 46.0.2490.86
    User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36

    Active Theme:
    – Newspaper 6.6
    http://themeforest.net/user/tagDiv/portfolio

    Active Plugins:
    – Advanced Custom Fields 4.4.3
    http://www.advancedcustomfields.com/

    – amr shortcode any widget 2.9
    http://webdesign.anmari.com/shortcode-any-widget/

    – BP Simple Front End Post 1.2.4
    https://buddydev.com/plugins/bp-simple-front-end-post/

    – BuddyBlog 1.1.3
    https://buddydev.com/plugins/buddyblog/

    – Custom Post Type UI 1.1.2
    https://github.com/WebDevStudios/custom-post-type-ui/

    – rtMedia Album Cover Art 1.2
    https://rtcamp.com/products/rtmedia-album-cover-art/

    – rtMedia BuddyPress Profile Picture 1.1.1
    https://rtcamp.com/products/rtmedia-buddypress-profile-picture/

    – rtMedia for WordPress, BuddyPress and bbPress 3.9.3
    http://rtcamp.com/rtmedia/?utm_source=dashboard&utm_medium=plugin&utm_campaign=buddypress-media

    – rtMedia Shortcode Generator 1.1
    https://rtcamp.com/products/rtmedia-shortcode-generator/?utm_source=dashboard&utm_medium=plugin&utm_campaign=buddypress-media

    – rtMedia Sidebar Widgets 1.2.2
    https://rtcamp.com/products/rtmedia-sidebar-widgets/

    – SysInfo 1.1.0
    http://wordpress.org/extend/plugins/sysinfo/

    – WPBakery Visual Composer 4.8.1
    http://vc.wpbakery.com

    ===============================================================================

    But is it possible to add media support (add/upload image) from the frontend posting for the users? Site beeing a community for pc-modders (live site without the buddyblog added, http://www.smpc.se) and the blog’s supposed to be their place to provide build logs, images is rather key-feature.

    In a best case/world scenario it would be that the users could add images/images and/or galleries into the blogposts based on/from their existing images/galleris on their profile.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 4, 2015 at 7:22 pm #1868

    Hi Peter,
    Welcome to BuddyDev forum.

    At the moment, we haven’t added the Media uploaded( UI ) to the BuddyBlog plugin. Allowing users non restricted access can cause a lot of problem. BuddyBlog does have option to allow upload( upto 3) media files but I believe that will not solve your purpose.

    Please give me till tomorrow and I will experiment a little and try to add the Media Uploader.I will leave the option to keep it enabled or disabled on the site admins though.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 55
    Peter Blom on December 4, 2015 at 7:34 pm #1870

    Looking forward to see if you can conjure something up. As there really doesn’t seem to be much options out there other then buddyblog for this kind of feature. Other then going with user custom sites in the multisite installation (we are going to allow that further along as well, but maybe only for selected groups/users).

  • Participant
    Level: Enlightened
    Posts: 55
    Peter Blom on December 9, 2015 at 11:50 am #1951

    Any updates regarding this?

    // Peter

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 9, 2015 at 5:49 pm #1952

    Hi Peter,
    I am sorry for the delay. It is coming with the next version of Simple Front End Post editor plugin. I have experimented a little bit and all seems fine.

    I will need 2 more days to finish this plugin though(I am aiming for tomorrow to finish but taking one day extra as precaution).

    Thank you for your patience.
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 10, 2015 at 8:00 am #1958

    Hi Peter,
    Need some Idea here. What do you think will be better from the following two:-

    1. Add user to upload media(image) and list those images below the post
    2. Add user to upload and let the media be inserted inside the post as happens in the admin dashboard?

    I am thinking second is a little better.

  • Participant
    Level: Enlightened
    Posts: 55
    Peter Blom on December 10, 2015 at 11:05 am #1963

    Thanks for the update, nice to hear it seems to be working!

    Its actually a though question, and I’ve been giving that some thought even before you asked it now, trying to figure out what would be the best way to handle it. I’ve read what you wrote twice now and I’m not 100% sure on the functionality.

    If we consider #1, depends on the function here, will it only list the images the user uploaded along with this current post? Or will it list all images just like the backend media manager? If it list’s all, then I would think #2 is the way to go.

    #2 Having it work like the backend is fine, and I realize that this is maybe the way it will have to work.

    In an ideal scenario (that propably is quite a bit outside the scope of this task/plugin) the best way (from a user perspective, and in terms of user friendliness) would probably be the option to add media via upload or insert any media that’s in that user’s own gallery.

    Thought, going with #2, would it be possible to have it filter the images shown based on the uploader (and uploader beeing the user then)? As the user seeing/having acess to all images could potentially be a bit confusing (for the user). If its not possible to solve however that’s the way it will have to be (still way better then no images at all)

    Maybe something useful in this post?
    https://wordpress.org/support/topic/restrict-author-to-their-own-media-featured-image

    The above link targeting authors, but maybe applicable to subscribers as well.

    // Peter

  • Participant
    Level: Enlightened
    Posts: 55
    Peter Blom on December 10, 2015 at 11:09 am #1964

    Also, I’d be happy to beta try it if you get a working version out before the weekend. 🙂

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 10, 2015 at 11:11 am #1965

    Hi Peter,
    Thank you

    1. The list is supposed to only show uploads with current post and not all uploads.

    I agree the better UI will be to allow user choose from their own media.

    I am more inclined towards your proposed UI. Will have more updates later today.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 10, 2015 at 11:14 am #1966

    We will have it today/tomorrow. There is not going to be anymore delay 🙂

You must be logged in to reply to this topic.

This topic is: not resolved