Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress Ajax Registration -> Reset password

Tagged: , ,

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 8, 2020 at 1:41 pm #33789

    Hi,

    When I use the modal to reset password I don’t receveice any mail, neither in my junk mails.
    But if I use it normal way, I mean by the login standard page, It’s OK.

    I use community builder free them
    bp-auto-activate-auto-login
    bp-ajax-registration

    any idea ?

    Thank you very much!

    Magali

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on October 8, 2020 at 10:59 pm #33796

    Hi Magali,
    I am sorry for the experience. Please allow us to check it by tomorrow and get back to you.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 9, 2020 at 6:56 am #33800

    Thank you very much,
    to explain better, when I click on the submit button, I come back on home page whithout any feedback, and even if I ask for another redirection (first I asked to show login panel but I tried all choices)

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 9, 2020 at 7:00 am #33801
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on October 10, 2020 at 1:51 am #33815

    Hi Magali,
    Thank you for the patience./

    I have tested it and the mail is being sent correctly.

    https://i.imgur.com/T4temCy.png

    Can you please check if something else is stopping it from being sent?

    Thank you for reporting about the Community Buiulder Message requiring friends component to be enabled. I will fix the issue with Friends requirement with Community Builder in the next update.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 10, 2020 at 10:33 am #33818

    unfortunately nothing changes, even by disabling all plugins or change plugin configuration :'( (in wp mail checker, nothing is send, and in forgot password panel, the input hidden to redirect url, the value is empty, whatever I check), … so I modified the login panel template to open the normal link (action = lostpassword), can we modify it in the child theme?

    I will continue to check and if I found something, I will let you know

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 10, 2020 at 5:27 pm #33819

    Sorry, I found your explanation on
    https://buddydev.com/docs/buddypress-ajax-registration/overriding-modal-styles-from-theme/
    to edit the login modal template

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on October 10, 2020 at 11:08 pm #33824

    Hi Magali,
    Can you please install the WordPress Email Catcher plugin and check the same?
    There is a possibility that email is being sent but discarded by receiver host. Please check and let me know if it shows email being sent or not?

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 7
    magwebcreation on October 11, 2020 at 1:50 pm #33831

    Hi Brajesh,

    I did, I installed this plugin (sorry, I called it “wp mail checker” in the previous post), and if I ask to reset password from native page ?action=lostpassword, I can see it in the logs, but if I use the modal, nothing appears, it’s not sent.
    If I open in browser the developer inspector (F12), I don’t see any warning,
    (in local mode, I added
    define(‘WP_DEBUG’, true);
    define( ‘WP_DEBUG_LOG’, true );
    define( ‘SCRIPT_DEBUG’, true );
    And nothing special in debug.log )
    I really wonder why, first I thought because of my own plugins, or of the force email login (I have also bbpress, yoast seo, and some popular plugins) but I tried to desactived them
    (not all on production because many users are often online,
    but all desactived in developpement, and never the feedback appears)

    The only thing I didn’t try is the theme, but I suppose is compatible with community builder free version.

    If suppose something’s wrong, and I don’t know where to check now.. 😉

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on October 12, 2020 at 10:02 am #33839

    That seems very strange. I will give it another shot with Community Builder theme active. Are you using Community Builder 2.1.0?

    Thank you
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved