Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Notification is not done by BuddyPress

Tagged: 

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on August 30, 2021 at 5:53 am #40295

    I noticed that if I want to delete, cancel or do whatever else on a Post, Media and others, BuddyPress doesn’t seem to be the one handling the notification. It appears the notification is happening by my browser as you can see here– https://prntscr.com/1qs9aiv

    This doesn’t look professional at all. If I want to delete a photo whose name is “Monkey Pic” for example, I should get a notification that says — Sure you want to delete “Monkey Pic?” Then a Yes and No option, or a Cancel and Ok option should follow.

    How do I get my notifications to function this way?

    Regards

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on August 31, 2021 at 6:53 am #40326

    Hi,
    Thank you for the question.

    that is not notification. That is a confirmation which is triggered when you perform some kind f destructive action( e.g. delete an activity or similar). BuddyPress uses the browser’s ability to ask you for confirm before processing the actions which might have non-reversible effect.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on September 1, 2021 at 2:42 am #40334

    Thank you so much Sir, for your answer.

    The only thing is that this answer told me what I already know, without telling me how to solve my problem.

    The problem is that BuddyPress is using the browser’s confirmation dialog. And I could already see that.

    But the browser’s confirmation dialog is not professional. It doesn’t personally connect with the action or Activity I am engaging with.

    What I mean by this, is that it doesn’t tell me if what I’m about to delete is a Post, a conversation, an Activity or a Page. It simply asks me if I’m sure on whatever I want to do, and this is ingenuine, unprofessional and kind of perfunctory.

    Every Application should have its own confirmation dialogs. See for Facebook– https://prntscr.com/1qx4yxy

    See for WhatsApp– https://prntscr.com/1qx52qc

    See for Instagram– https://prntscr.com/1qx55of

    Or my Messages Application dialog– https://prntscr.com/1qx58rq

    So BuddyPress shouldn’t be different, and it’s troubling to me because my test users are already complaining about this.

    Now, I saw this plugin– https://buddydev.com/plugins/bp-confirm-actions/

    1.) Do you think this plugin adds the missing Confirmation feature in BuddyPress that I’m looking for?

    2.) Will this override BuddyPress use of the browser’s confirmation dialog?

    3.) Will it be possible to rephrase the confirmation messages? What I mean here is for example: instead of saying– Are you sure?–when I want to delete a user, can it say– Are you sure you want to delete [member.username] ? — where member.username equals username of the member to be deleted?

    Regards.

  • Keymaster
    Level: Yogi
    (BuddyDev Team)
    Posts: 3115
    Ravi on September 1, 2021 at 5:46 am #40335

    Hello CleanGist,

    Thank you for the details. But the confirm box you are looking for is not supported by the plugin “BP Confirm Actions”. It works with the “BP Legacy” template pack only and shows confirm box on the following action if enabled:

    1. Cancel friendship button
    2. Cancel friendship request button
    3. Leave group button
    4. Unfollow button
    5. Delete activity button

    Regards
    Ravi

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on September 1, 2021 at 6:06 am #40336

    Grnnnn! Angry and sad.

    Well, I hope you do know that when users make a Feature Request, that the intention is not to stress you, but to satisfy a need in the user’s life?

    However, I hope you also know that providing this Feature Request and making it available makes the user happy 😊?

    But do you also see the bigger picture that the availability of this requested feature goes ahead to make your product better and takes it to a whole new and higher level?

    So you’ve said this plugin works for BP Legacy. Is there a canonized and irrevocable Universal Law somewhere that now says it cannot be used for BP Nouveau?

    BP Legacy looks like the past. BP Nouveau is the current. Should you continue to stick only with the past?

    Could you not modify this BP Confirm Action plugin to now also work with BP Nouveau?

    Needing to hear from you soon.
    Regards.

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on September 13, 2021 at 4:03 am #40503

    I am still awaiting your answer Sir.

    I am asking that–Could you not modify this BP Confirm Action plugin to now also work with BP Nouveau?

    Regards

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2021 at 6:59 am #40524

    Hi,
    Do you need the option that says “Are you sure about it” as popup in BP Nouveau? That’s this plugin does. Just confirming before we test it with Nouveau.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on September 14, 2021 at 12:48 pm #40528

    I really didn’t understand this your answer.

    What I am saying is that, when I want to do something as destructive as Delete, I want a Confirmation as we have for–

    Facebook– https://prntscr.com/1qx4yxy

    WhatsApp– https://prntscr.com/1qx52qc

    Instagram– https://prntscr.com/1qx55of

    Or my Messages Application dialog– https://prntscr.com/1qx58rq

    1a) Are you saying that BuddyPress Confirm Actions plugin (https://buddydev.com/plugins/bp-confirm-actions/) can help me add such functionality?

    1b.) Are you saying that it can work easily and seamlessly with BP Nouveau Template of BuddyPress?

    1c) If you are asking me “If I want it as a Pop Up?”

    The answer is a big “YES”.

    Needing to hear from you soon.
    Regards

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2021 at 8:17 pm #40540

    Hi,
    Thank you for the reply.

    What you are looking for is the correct expectations but we are limited with the issue., We do not have much information about the context, so we are unable to provide a customized message for all the screens. A theme is in better position to do that(and we are planning this type of feedback for our future theme).

    For the time being, the plugin is limited and will not be able to provide the kind of feedback you are looking(even though I believe you are very right about it and the feedback should have this flow to feel more natural).

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 17
    CleanGist on September 15, 2021 at 5:04 pm #40561

    When you say–

    “but we are limited with the issue., We do not have much information about the context, so we are unable to provide a customized message for all the screens”.

    Are you saying it is an impossible task?

    Although I do not know PHP very well, I know that BuddyPress should have been written with PHP, and this means that there is possibility to hook into BuddyPress Actions to insert this Confirmation Feature.

    What I want to believe is that you just haven’t chosen to look in that direction, dig into that depth, and give it the much needed work.

    If you guys want to make it possible, it will indeed be possible.

    I have the confidence to say that “If you guys want to make it possible, it will indeed be possible” because you guys are the superstars of BuddyPress, and can make anything possible in BuddyPress if you want to.

    1.) Will you try to make this Full Confirmation Feature possible?

    2.) I think I know that you Sir(Brajesh Singh) seem to have a close connection with the Core Developers of BuddyPress.

    Could you at least add this Request to them as a Feature that they need to include in version 10.0 as well?

    3.) A theme is in better position to do that(and we are planning this type of feedback for our future theme)

    Are you saying that you are coming up with a BuddyPress Theme?

    3b.) What mad arse features should we expect from this Theme? Or is there a Roadmap and Feature Request Page where we can drop Feature Requests?

    4.) For the time being, the plugin is limited and will not be able to provide the kind of feedback you are looking(even though I believe you are very right about it and the feedback should have this flow to feel more natural).

    4a.) Can you not expand this plugin and give it unlimited power to do much more than it presently does?

    4b.) Can you not make it act in the way I’ve needed it to act?

    Regards

You must be logged in to reply to this topic.

This topic is: not resolved