Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress Avatar Moderator. Not replace old avatar with placeholder

  • Participant
    Level: Enlightened
    Posts: 95
    Maksim Rusakovich on September 14, 2018 at 5:12 pm #17352

    Hello.

    1. Is it possible not to replace current moderated avatar with a placeholder, while new avatar is under moderation?
    But, now each changing of the avatar replaces the moderated avatar.

    2. Could you, please, check, while link in email is not working?
    http://prntscr.com/kugnxt

    Thank you.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2018 at 5:46 pm #17354

    Hi Max,

    1. Sorry, It is not doable currently. The avatar upload is handled by BuddyPress and it removes the old avatar the moment a new avatar is uploaded. That’s why we are unable to show old avatar and use placeholder.

    2. Seems like a bug. will push an update in next couple of hours.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 95
    Maksim Rusakovich on September 14, 2018 at 5:51 pm #17356

    Hello Brajesh.

    Ok, I understand you.
    But why not to save old photo until moderation? And use it instead of placeholder?
    Because user looses his avatar, if the new one will be refused.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2018 at 5:56 pm #17357

    It’s a good suggestion the problem is we don’t seem to have a proper hook to copy the media. The action fires after an image is uploaded. That was happening when we released the plugin initially.

    I will be looking at it in more details when next cycle of BuddyPress starts and if needed(which I believe we should), can get a hook into the core by requesting the BP team.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 95
    Maksim Rusakovich on September 14, 2018 at 6:25 pm #17359

    Hello Brajesh

    Great, that you have influence to Buddypress team!
    Is it possible to limit avatar uploading period?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2018 at 6:30 pm #17360

    Hi Max,
    Thank you,.

    No, It is not the influence.
    On BuddyPress trac anyone can request a feature and the people in BuddyPress team are good people. They will most of the time entertain a feature if it has some merit and can make BuddyPress better.

    Limiting the duration, yes, we can. It won’t work for past uploads, but we can start tracking last uploaded time in future and do it.

    I will get this feature in our next release(not in today’s release).

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 95
    Maksim Rusakovich on September 14, 2018 at 7:27 pm #17361

    Great.
    Thank you.

    1. What is the best way to request the function in Buddypress?

    2. Your plugins updates are coming automatically via wordpress dashboard?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2018 at 8:04 pm #17365

    Hi Max,

    1. You can post a ticket for core here https://buddypress.trac.wordpress.org/

    2. Yes, Please make sure you have BuddyDev dashboard installed and configured with your API Key.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 17, 2018 at 9:21 am #17417

    Hi Max,
    Please upgrade the plugin to 1.0.3

    After upgrade, In the settings(Admin notification), please change View: %s to view: [queue_url] and it will send you the correct link.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 95
    Maksim Rusakovich on September 17, 2018 at 2:47 pm #17426

    Great. Thank you.

    Do you plan to make changes with leaving old avatar during a new avatar moderation?

You must be logged in to reply to this topic.

This topic is: not resolved