Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress Ajax Registration

Tagged: 

  • Participant
    Level: Enlightened
    Posts: 53
    David Levi on December 1, 2018 at 8:28 am #19151

    Something I noticed in the plugin is that you are missing the bpajaxr-form-field-error div in the panel-forget-password.php

    I added the following code to mine. There might be another error to handle, besides user_login, but I’m not sure.

    <?php if( $request->errors->has('user_login' ) ):?>
    <div class="bpajaxr-form-field-error">
	<?php echo wp_kses_data( $request->errors->first('user_login' ) );?>
     </div>
<?php endif;?>

    Just a heads up.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 1, 2018 at 8:32 am #19152

    Hi David,
    Thank you. Will have it in next update( this Monday).

    Thank you for the heads up.

    Best regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 53
    David Levi on December 1, 2018 at 9:11 pm #19159

    Awesome

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 3, 2018 at 9:21 am #19193

    Hi David,
    I have checked it now.

    In the panel-forget-password.php, we have this code

    
<?php bpajaxr_helper()->render_feedback();?>

    Just above the form. It should take care of the error showing. Is it possible that your template does not have this code?

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 53
    David Levi on December 4, 2018 at 6:25 pm #19236

    I do have that code in the template file, but without the code that I added (like in the other files), the errors would not show at all.

    Thats weird, what do you suggest?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 4, 2018 at 6:26 pm #19237

    That’s strange. That code is suppose to aggregate all notices/errors on the page and show them. I am going to try it and will write back again.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 53
    David Levi on December 10, 2018 at 12:51 am #19339

    Do you think we can get a verification message when reseting the password as well. Now it just jumps to the registration page.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 10, 2018 at 10:03 am #19344

    Hi David,
    We did it by design. On a successful verification, it should show the login panel not the registration panel.

    Can you please tell me the workflow that leads to registration from reset password.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 53
    David Levi on December 10, 2018 at 7:30 pm #19365

    You are right, it does go to the login panel my mistake.

    However, the point being that there is no feedback telling the user to check his email for a verification. So some users get lost and don’t know what to do, or what the next step is.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 11, 2018 at 3:33 am #19371

    Hi David,
    Thank you for confirming. I am looking at it today and will have a release a bit late today with this enhancement for showing the message.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved