Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Social Login – link account

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 24, 2016 at 10:01 pm #3165

    Hi Brajesh,

    I hope you’re doing well.

    I wanted to ask you if it were possible to have a profile field in buddypress settings – > Account Details to link/unlink a user social account?

    I’m currently using this plugin:
    https://wordpress.org/support/plugin/wordpress-social-login

    I sent the author an email, but he seems like he is not further developing this plugin. It’s a shame, because it’s actually a really great plugin.

    Hope you can give me some insights here.

    Regards,
    Joshua

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on March 28, 2016 at 12:36 am #3189

    Hi Joshua,
    Allowing unlinking is easy(as it will include deleting a few meta keys ). Allowing linking will depend on the plugin.
    Does this plugin allows users to use their existing WordPress account? If yes, That can be done too.

    Please do let me know an we can add some snippet.

    Thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 28, 2016 at 7:42 pm #3211

    Hi Brajesh,

    Yes the plugin does allow a user to link their existing account during the process. It’s just odd that it doesn’t allow the user to link/unlink their social accounts.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on March 28, 2016 at 11:05 pm #3227

    Hi Joshua,
    Thank you for confirming. Ravi is looking at it and we may have a solution tomorrow.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on March 29, 2016 at 11:33 pm #3245

    Hi Joshua,
    Can you please give it a try
    https://github.com/buddydev/bp-link-unlink-social-account

    @ravi1987 created the plugin today. The code works for BuddyPress and users can link/delink account from BuddyPress settings page.

    Please check and let me know.

    thank you
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 30, 2016 at 8:25 pm #3264

    Hi Brajesh,

    Thanks so much! I tried this plugin and it installs correctly. I see the link/unlink buttons in the settings area of my test account profile. When I click on one of the social icons, it says it’s redirecting (which is normal for the social login) but then gives me a 403 error.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on March 30, 2016 at 8:28 pm #3265

    Hi Joshua,
    Is the social login plugin configured and working correctly on your site? Also, Is the site using https?

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 30, 2016 at 8:47 pm #3266

    Hi Brajesh,

    The site is using https. As far as I know the plugin is configured correctly.

    I did notice that when one tries to log in via the register page or login page, the wp-login.php precedes the url. The url inside of the user settings is missing wp-login.php. I’m not sure if this is required or not for it to function properly.

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 30, 2016 at 8:48 pm #3267

    Ah, I stand corrected. Apparently it ISN’T working properly. I did switch my site over to https in the last few months.

  • Participant
    Level: Enlightened
    Posts: 120
    Erich199 on March 30, 2016 at 9:24 pm #3268

    Ah, after some careful research, I found the culprit.

    I had an .htaccess file that denied all access directly to .php files. Once I placed an override .htaccess in the specified folder, it is working perfectly!

    Thanks to you Brajest and Ravi for creating this! This is exactly what my site was missing for user accounts.

You must be logged in to reply to this topic.

This topic is: resolved