Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Buddycircles

Tagged: 

  • Participant
    Level: Enlightened
    Posts: 38
    damland on November 28, 2019 at 9:10 pm #26790

    Hello,
    I’m a new member, I’ve installed your plugins and are great but I have some problems:

    BuddyCircles:
    1.I’ve set only admin to be able to create circles but non admins (ex.subscribers) are still able to delete them
    2.Default circles don’t get created to the new users if I have bp-auto-activate-auto-login enable, can you make it compatible? And also can you add the option to bulk update all the members
    3.How can I show the circles inside the members directory? Example: “All members” “My friends” “My circle1” “My circle2” “Recent Visitors”

    Buddypress Friendship Restrictions:
    4.when I have buddypress-friendship-restrictions enabled users aren’t able to accept friend request anymore, when they click “Accept” on members/user/friends/requests/ it says Accepted but if I refresh the page it ask to accept again but it never gets accepted

    Avatar Mod:
    5.Can you add the option to always approve uploaded avatars but let the admin delete the avatars after they get uploaded?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 29, 2019 at 12:38 am #26797

    Hi,
    Welcome to BuddyDev and thank you for joining our membership.

    Thank you for reporting the issues.

    1. It is most probably a bug. We assumed that a user can delete their own circle. We will fix it.
    2. Thank you for reporting. It is related to priority of the hook. We will make it work together.

    3.It is not available currently, but we can add that. Are you using legacy or Nouveau template pack?

    4. For Bulk Creation of existing member’s circle:- This is in our future plan and will be available in new year.

    We will be pushing a release for circle by day end today or Monday. Will be posting back here.

    Buddypress Friendship Restrictions:
    4. an you please open a new topic and let me know if that happens for all roles or specific role. It could be due to the role based setting or the global setting.

    Avatar Mod:-
    Ah I see. You mean you want to see the log of uploaded avatars but do not keep them in moderation. I will check and get back to you about it later today.

    PS:- In future, Please open separate topic for each specific discussion. That will help us keep organized and assist you in better way.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 38
    damland on November 29, 2019 at 2:50 pm #26804

    1. Ok, thanks
    2. Ok, thanks
    3. I’m using Legacy, and I really need this…
    Ok I will test again and open new topic for the Friendship Restrictions, sorry about that
    Thank You

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 30, 2019 at 6:00 pm #26819

    Hi,
    Thank you.

    I will update you on Monday.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 2, 2019 at 12:07 pm #26829

    Hi,
    Thank you for the patience.

    1. Please use this code in your bp-custom.php or in your theme’s functions.php. It will restrict deletion of circles.

    

add_filter( 'bcircles_user_can_delete_circle', function ( $can ){
	 // only admins can.
	return is_super_admin();
});

    2. Please recheck. I have tested it today and these two are working fine. Please make sure the “Create circles” check box is enabled as shown below.
    https://i.imgur.com/A9v1qir.png

    Please do note that the separator is ‘|’ and not ‘/’

    3. Please upgrade to 1.0.4. You can enable it from Settings->BuddyCircles -> Miscellaneous section.

    https://buddydev.com/plugins/buddycircles/

    Please let me know if works for you or not?

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 38
    damland on April 9, 2020 at 1:12 am #28662
    
add_filter( 'bcircles_user_can_delete_circle', function ( $can ){
	 // only admins can.
	return is_super_admin();
});

    It’s not working, users are still able to delete and edit the circles
    thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 9, 2020 at 1:14 am #28663

    Hi,
    Where have you put the code?

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 38
    damland on April 9, 2020 at 1:32 am #28664

    yes sorry its working after they press on delete, I only had to hide “delete” button with css
    If for example they rename a circle or change its privacy the changes will be only for their profile or globally?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 9, 2020 at 1:34 am #28665

    Hi,
    Thank you for the reply.
    The circles are private to users. Even when 2 circles from 2 users with same name, they are ot same. Changing name of one will not have any effect on other.

    So, the changes are very much specific to the user.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 38
    damland on April 17, 2020 at 4:48 pm #28932

    I get this error when an admin try to delete an user that has some circles (I automatically add circles to new users using the plugin):

    Fatal error: Uncaught Error: Call to undefined method stdClass::delete() in /var/www/vhosts/mydomain.com/httpdocs/wp-content/plugins/buddycircles/src/core/circle-functions.php:78 Stack trace: #0 /var/www/vhosts/mydomain.com/httpdocs/wp-content/plugins/buddycircles/src/handlers/class-actions-handler.php(202): bcircles_delete_circle(Object(stdClass)) #1 /var/www/vhosts/mydomain.com/httpdocs/wp-includes/class-wp-hook.php(289): PressThemes\BuddyCircles\Handlers\Actions_Handler->on_account_delete(33) #2 /var/www/vhosts/mydomain.com/httpdocs/wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters(”, Array) #3 /var/www/vhosts/mydomain.com/httpdocs/wp-includes/plugin.php(478): WP_Hook->do_action(Array) #4 /var/www/vhosts/mydomain.com/httpdocs/wp-admin/includes/user.php(367): do_action(‘delete_user’, 33, NULL) #5 /var/www/vhosts/mydomain.com/httpdocs/wp-admin/users.php(197): wp_delete_user(33) #6 {main} thrown in /var/www/vhosts/mydomain.com/httpdocs/wp-content/plugins/buddycircles/src/core/circle-functions.php on line 78

The topic ‘ [Resolved] Buddycircles’ is closed to new replies.

This topic is: resolved