Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Suspended users can be messaged from existing message threads

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on December 3, 2021 at 8:16 am #41908

    Thanks, Brajesh.
    We’ll look forward to hearing back from you. 🙂

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 6, 2021 at 2:03 am #41933

    Hi Nifty,
    Thank you. I will have the update sometimes this week.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on December 24, 2021 at 5:11 am #42247

    Hi Brajesh,

    Are there any updates on this? 🙂

    Thanks.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 24, 2021 at 11:15 am #42250

    Hi Nifty,
    I am sorry, I will update you in next 24 hours.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 24, 2021 at 6:54 pm #42257

    Hi Nifty,
    I had a look at the Gwangi theme and Moderation tools. I did not see any issue with the layout for suspended users. I am using the latest version of theme(child theme) .

    I did find a bug with reply blocker disabling other replies and have released an update.

    If the issue still persists on your site, Please try disabling some of the plugins on the staging site to re-check.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on December 26, 2021 at 2:35 am #42263

    Hi Brajesh,

    Thanks for getting back to us.
    We updated all of the plugins and the theme, including to version 1.4.3 of BuddyPress Moderation Tools, but we’re still having the same issue (we’ve since reverted them back to the versions we’re using on our live site).
    We’ll add another private message with additional details.

    Thank you.

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on December 26, 2021 at 2:36 am #42264
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on December 27, 2021 at 11:25 pm #42288

    Hi Nifty,
    The problem is with Grimlock for BuddyPress plugin(that comes with Gwangi theme).

    They are using the action

    
	<?php do_action( 'bp_before_message_thread_reply' ); ?>

    Before the form but the action

    
<?php do_action( 'bp_after_message_thread_reply' ); ?>

    Is not after the form. It is after an extra closing div. If we are discarding the content between these 2 actions, the extra div gets lost causing it.

    Please report it to Gwangi authors. I have updated it on your staging site.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 72
    Nifty on January 1, 2022 at 5:00 am #42320

    Hi Brajesh,

    Thank you very much for looking into this and your fix! We will advise the theme authors of this.
    Would the only change you’ve made be in grimlock-buddypress/templates/members/single/messages/single.php?
    If you need to confirm, the staging site is still active so feel free to log in and check 🙂.

    Thanks again.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on January 2, 2022 at 1:17 am #42336

    Yes, that’s the only change.

You must be logged in to reply to this topic.

This topic is: resolved