Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Having an issue with Profile Privacy plugin

Tagged: 

  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 7, 2021 at 3:50 am #36078

    Hi,

    So I finally launched my site. I invited a few people in to see how it would go. I discovered that somehow the new members are not visible in the members directory, even if they all have their profiles set to public.

    I checked all the settings in both the buddyboss privacy and the buddydev profile privacy.

    I have the members directory in the profile dashboard area, right sidebar widget. When you see the preview inside the widget, there are members that show there that do not show when the entire directory is showing.

    I had put in a ticket to buddyboss and they did a troubleshoot on a staging site I made for this. Here is what they said:

    “Upon further investigation, we found that the BuddyPress Profile Visibility Manager plugin was hiding the profiles in the members directory.

    De-activating the plugin, shows all the 22 profiles when you switch the user to a normal user.”

    —-
    I can verify the fact that a subscriber can see the members, not just the admin with the buddydev plugin deactivated.

    Have you see this conflict before? Is there a possible fix? I really hope we can figure this out. The buddydev plugin is an important part of the site security.

    Please let me know if I can provide credentials in a secure way to the staging site.

    Thank you and looking forward to hearing from you!

  • Keymaster
    (BuddyDev Team)
    Posts: 24712
    Brajesh Singh on February 7, 2021 at 9:53 am #36080

    Hi Kathy,
    Congratulations on your launch.
    I am sorry for the inconvenience. Please link me to the site.

    Our plugin has a setting for visibility in members directory as well as for being searchable. These must be set to Yes to make the profile visible in the directory.

    Can you please check that is the case?

    regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 7, 2021 at 10:16 am #36082
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24712
    Brajesh Singh on February 7, 2021 at 10:30 am #36083
    This reply has been marked as private.
  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 7, 2021 at 10:38 am #36084
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24712
    Brajesh Singh on February 7, 2021 at 8:00 pm #36088
    This reply has been marked as private.
  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 7, 2021 at 9:09 pm #36095

    Is there anyway to send a screen shot? I’m so very confused.

    I want the default for users to be that their profile is public for members to see.

    If you cannot make the screen shot, can you give me the number from the general settings of exactly which ones I need to change? It is not clear to me. When I look at the general settings they look correct. I have read them over ten times. So I don’t understand at all what is incorrect. I’m so sorry to belabor this. I simply don’t understand what I am missing here.

    1. Only site admin can update user settings? Yes
    No
    If you enable, users will not be able to change the preference.

    2. Enable Member directory visibility preference? Yes
    No
    If you enable, users will be able to set preference if they want to visible in the listing or not?.

    3. Enable Member search visibility preference? Yes
    No
    If you enable, users will be able to set preference if they want to visible in the user search or not?.

    4. Enable Friendship Request preference? Yes
    No
    If you enable, users will be able to set preference if they want to accept friendship requests or not.

    5. Enable Friends List visibility? Yes
    No
    If you enable, users will be able to set preference for friends list visibility.

    6. Enable Profile privacy preference? Yes
    No
    If you enable, users will be able to set preference for who can see their profile.

    7. Enable Last active time visibility? Yes
    No
    If you enable, users will be able to set preference if they want their last active time to be visible or not.

    8. Enable group tab visibility? Yes
    No
    If you enable, users can change the visibility of the group tab on their profile.

    9. Protected Profile Policy
    Redirect to the last visited non protected page.
    Show protected message on profile.
    Do you want to show the protected message on profile or redirect to the last visited page.

    10. Do not hide users from site admin? Yes
    No
    If you enable, When a site admin is logged in to the site, they will see all members irrespective of users settings.

    11. Restrict access to members directory? Yes
    No
    If you enable, You can select who can access/see members directory.

    12. Who can see members directory? Everyone
    Only site members(logged in)
    Only site admins
    If you have enabled members directory protection in previous option, you can choose the visibility.

  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 7, 2021 at 11:00 pm #36096
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24712
    Brajesh Singh on February 7, 2021 at 11:09 pm #36097

    Hi Kathy,
    I am sorry for the confusion.

    I have updated the settings on the staging site. Please try registering a new user account on the staging site and it will be listed in the directory now.

    Please use the same settings on the live site.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 47
    Kathy Geisler on February 8, 2021 at 12:00 am #36101
    This reply has been marked as private.

You must be logged in to reply to this topic.

This topic is: not resolved