Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Featured Members

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 17, 2017 at 3:46 pm #8614

    Hi, another one I posted over on wordpress.org, but realized I should move over here.

    https://wordpress.org/support/topic/widget-not-working-58/

    I am using this plugin, Featured Members on my new site (still building it.) The integration with the member list works, I can set people as featured, remove them, and view the list on my directory. But when I put the widget in a sidebar on any page it says:

    FEATURED MEMBERS

    Sorry, no members were found.

    Here is what it looks like in the members list:
    http://i.imgur.com/pUM56vB.png

    Here is what the widget looks like on John’s profile:
    http://i.imgur.com/1HsZrbp.png

    Here is what it looks like when I am viewing Admin’s profile:
    http://i.imgur.com/OrWhUdu.png

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 17, 2017 at 4:52 pm #8615

    Hi Gregg,
    Thank you for posting.

    Something on the site is modifying the bp_has_members() loop. Are you using any plugin or code to filter on the members list somewhere?

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 17, 2017 at 6:16 pm #8618

    Quite possibly. I have a lot of plugins in place. Half of them yours 🙂

    Here they all are:

    http://i.imgur.com/Uc99Rn0.png
    http://i.imgur.com/Lx2pzRc.png
    http://i.imgur.com/HY0XUCh.png
    http://i.imgur.com/rGjybCw.png

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 17, 2017 at 11:09 pm #8619

    Just to add to the fun, it sometimes looks like this while on Admin’s account:

    http://i.imgur.com/BbsL0u1.png

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 18, 2017 at 8:51 pm #8627

    Hi Gregg,
    Can you please try disabling BuddyPress profile visibility Manager and BuddyPress Mute(one by one) and check if that makes the list work?

    Also, for outputting html in the list, it is most probably the verified plugin causing it. I am going to test it and will report back.

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 18, 2017 at 9:37 pm #8631

    Verified is probably causing that one I would guess, I can’t reliably cause it to happen so testing it is hard.

    The other two plugins didn’t seem to fix the list. Disabled them one at a time and tested.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 18, 2017 at 9:53 pm #8638

    Hi Gregg,
    I am sorry but I am not sure what else can cause that issue. These two plugin do affect the loop so I was hoping that they might be the reason.

    Is there any code in your bp-custom.php or in your theme that is modifying the members loop?

    If not, It is a painful process but we need to test by changing theme, and or deactivating plugins one by one. I am sorry for the trouble.

    Please check and let me know the issue, if there is anything that can be done in the plugin, I am happy to update it.

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 21, 2017 at 7:45 pm #8699

    There is no code in my bp-custom.php that touches the members loop. The only thing I do in my custom file is add a tab to a group. And the code we got working in another thread for skipping a group in the group notification plugin.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 21, 2017 at 7:56 pm #8700

    Hi Gregg,
    can you please check it on a different installation or by changing the theme? I don’t see any issue on my local here.

  • Participant
    Level: Enlightened
    Posts: 73
    Gregg Housh on April 21, 2017 at 9:58 pm #8701

    Yeah, I don’t believe it’s your plugins fault. It has to be something to do with the theme or a conflict with another plugin. I know that much, which one and how, I have no idea.

You must be logged in to reply to this topic.

This topic is: not resolved