Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress Profile Completion and BuddyPress Force profile photo

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 14, 2020 at 10:43 am #31700

    Hello,

    Please can you add support for this plugin https://wordpress.org/plugins/leira-letter-avatar/, This plugin supports buddypress but while its activated, the BuddyPress Profile Completion and BuddyPress Force profile photo detect users as having uploaded their profile photo can you add support to bypass this.

    I know the BuddyPress Force profile photo has been replaced with the BuddyPress Profile Completion plugin but for some weird reason the BuddyPress Profile Completion does not work at all for me, it does not force redirect users only the BuddyPress Force profile photo works effectively.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 14, 2020 at 7:10 pm #31710

    Hi Tosin,
    Thank you for the suggestion.

    Do you want me to test for letter avatar and if this is enabled, we should still force users for avatar?

    Please let me know and I will check their plugin/code to see if this is doable.

    Regards
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 15, 2020 at 9:01 am #31724

    Yes testing for letter avatar would be much appreciated

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 15, 2020 at 12:18 pm #31739

    Thank you.
    Can you please help me understand, should we restrict a user who has letter avatar or allow them?

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 15, 2020 at 12:52 pm #31745

    I want to allow them, while letter avatar plugin is enabled all users who haven’t uploaded their profile photo should be forced to do so.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 15, 2020 at 10:18 pm #31757

    Thank you. I or @ravisharma will update you in next 2 days.

    Regards
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 21, 2020 at 9:34 am #31848

    Good day sir, please any update on this

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 22, 2020 at 5:23 am #31857

    Hi Tosin,
    If you are using the Force Profile Photo plugin, please comment this line
    https://github.com/buddydev/bp-force-profile-photo/blob/master/bp-force-profile-photo.php#L190

    You can change that to

    
// $has_avatar = bp_get_user_has_avatar( $user_id );// fallback.

    That will do it.

    Regards
    Brajesh

  • Participant
    Level: Guru
    Posts: 900
    Tosin on July 22, 2020 at 7:42 pm #31872

    I did as instructed but old users who already have their photos uploaded are still being forced to upload another photo.

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 22, 2020 at 8:09 pm #31874

    Hi Tosin,
    That will only happen for users who had uploaded avatar before you activated force profile photo plugin.

    The Force profile photo stores a meta on new profile photo upload.

    We are unable to differentiate past avatars form letter avatars as the letter avatar plugin filters on default avatar.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved