Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] BuddyPress Moderation Tools API endpoints

Tagged: , ,

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on September 12, 2021 at 7:57 am #40493

    Hi Brajesh,

    Are there any API endpoints available for BuddyPress Moderation Tools so that the block function (which works so well on through a web browser) could also be reflected in a mobile app?

    At the moment if a Bob was to block Peter through a web browser version of our site, Peter can still see and interact with Bob through our app. Is it possible to prevent this from happening?

    Thank you.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 12, 2021 at 4:52 pm #40498

    Hi Nifty,
    Thank you for reporting the issue.

    In case of web, we are preventing by checking before the ajax requests. For the API, we will need to check if the particular end points(adding friend/sending message etc) have any filter for validation/permissions check.

    I will report in next 2 days if there ae filters available in BuddyPress REST API and if we can do it.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on September 13, 2021 at 9:45 am #40506

    Hi Brajesh,

    That sounds great, thank you.
    We’ll look forward to hearing back from you. 🙂

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on September 18, 2021 at 5:19 am #40616

    Hi Brajesh,

    Just wondering if you have any updates on this? 🙂

    Thanks.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 23, 2021 at 6:08 pm #40677

    Hi Nifty,
    Thank you for the patience.

    I have checked and I can see there are hooks available for checking permissions t the rest end points. We will be enabling support for preventing the interaction(It will prevent actual message from being sent etc). The experience may not feel native as the button will be controlled via client and may not be hidden.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on September 24, 2021 at 5:01 am #40692

    Hi Brajesh,

    That sounds like a great solution, thanks for looking into it.
    Do you have a timeframe in mind for when it will be enabled? It would be exciting to test it out. 🙂

    Thanks.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 27, 2021 at 10:08 am #40728

    Hi,
    I am sorry for the late reply. We will have a release by this weekend.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on September 28, 2021 at 11:29 am #40743

    No worries at all, Brajesh! We’ll look forward to the update. 🙂

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 28, 2021 at 9:44 pm #40749

    Thank you 🙂

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on October 6, 2021 at 9:03 am #40843

    Hi Brajesh,

    We think we may have made a slight error in our original post – this request is related to the BuddyPress Block Users plugin, rather than the BuddyPress Moderation Tools plugin.

    Thank you. 🙂

You must be logged in to reply to this topic.

This topic is: resolved