Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress Message Privacy help

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 14, 2017 at 9:39 am #9920

    Hi,
    There is no need to use the above code anymore.

    Please upgrade to 1.1.1

    After upgrade, Please visit settings->BuddyPress ->Options and you will see the message privacy option there.
    In your case, please select user nicename from the option.

    Let me know if that works or not?

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 9:40 am #9921

    Thanks. Will do – when my hosting company comes back online!

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 10:14 am #9922

    What a legend! Works perfectly. Stops by nicename only.

    Did several tests and everything worked as it should, including the plugin update.

    Adds a facility that is a very important option for members on my type of website.

    For D W, if you want to be able to change the nicename from your WP admin panel, use the plugin “User Rename by Azed”. Otherwise you would have to manually edit the database via phpmyadmin in your hosting cPanel.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 14, 2017 at 10:17 am #9923

    Thank you for the kind words Graham.

    You have been very helpful to me and D W. I sincerely appreciate it.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 15, 2017 at 9:11 pm #9928

    I just tried the new update and set it to nicename in the menu and it didnt work for me. so i looked at my user table in my database and realized that it is the display name not the nicename that my users can see on each others profiles. for me the nicename seems to be the same as login name just all lowercase.

    Would it be possible for you to add in a Display name option as well?

    Thank you so much for your help guys! sorry I didn’t respond faster.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 16, 2017 at 4:36 am #9929

    D W

    Yes the nicename is by default the same as the login name. The only name users can change is the display name.

    If you block by display name, and someone changes theirs, the block will no longer work.

    That’s why nicename is the better choice, it never changes and can be set by the site owner when a member joins (either through a plugin as I mentioned or in phpmyadmin) and is visible to members as their @name

    Using the login name reveals one half of a user’s security information and is a bad idea.

    I think it would be very difficult for Brajesh to make the plugin track display names, but you never know.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 16, 2017 at 5:04 pm #9933

    Graham you make a very good point. I Guess i need to either figure out how to prevent users from changing there display name and have an option for that with the plugin, OR i will have to try to get buddypress to display the nicename so users can know what to type into the ban list. unfortunately the site is going to be public and could potentially get thousands of users so i cant just change it for each one. im gonna look into those options i described above while i wait to hear from Brajesh.
    Thanks for your response Graham!
    and thanks again Brajesh.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 16, 2017 at 5:07 pm #9934

    D W,

    Buddypress already displays the nicename. As I said, it’s the @name that is shown in a member’s profile page.

    • This reply was modified 7 years, 5 months ago by Graham.
  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 16, 2017 at 5:09 pm #9936

    Hi Graham, DW thank you.

    As Graham explained, Display names can be changed. Also, Display names are not unique. Two users might have same display name.

    Here is a solution that I have been thinking of:- What if we give a button on the message that that says “Block future communication/message” from this user. When the user clicks that, we block(using nicename/user_login) the communication automatically? They can unblock in the same way.

    Please let me know what do you think?

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 16, 2017 at 5:16 pm #9937

    Hi Brajesh,

    That’s the most logical thing to do. An obvious solution that we should have thought of before.

    On another note, just installed your Mediapress plugin. Didn’t realize it was yours at the time. Was going to use the rtMedia one, but it didn’t feel quite right.

    Cheers,
    Graham

You must be logged in to reply to this topic.

This topic is: not resolved