Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 14
    D W on August 2, 2017 at 5:21 pm #10166

    Hey Brajesh, How is the update coming? Im going out of town for a little while and after today I wont be able to check in here for a week or so. Hopefully it will be ready for me to try out by the time i get back.

    Have a great day! thanks for your help.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 24, 2017 at 6:39 pm #10035

    Hey Brajesh, thank you for your help with this, When do you think the update will be ready? Ive been looking forward to implementing it!

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 17, 2017 at 12:36 am #9938

    Thank you Brajesh that sounds perfect! I look forward to trying it out.

    -Graham i believe it is extended profile fields that is causing the display name to show instead of nicename. I have run multiple tests and my users only see each others display name at top of the profile. I confirmed this by looking at my user table in the database.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 16, 2017 at 5:04 pm #9933

    Graham you make a very good point. I Guess i need to either figure out how to prevent users from changing there display name and have an option for that with the plugin, OR i will have to try to get buddypress to display the nicename so users can know what to type into the ban list. unfortunately the site is going to be public and could potentially get thousands of users so i cant just change it for each one. im gonna look into those options i described above while i wait to hear from Brajesh.
    Thanks for your response Graham!
    and thanks again Brajesh.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 15, 2017 at 9:11 pm #9928

    I just tried the new update and set it to nicename in the menu and it didnt work for me. so i looked at my user table in my database and realized that it is the display name not the nicename that my users can see on each others profiles. for me the nicename seems to be the same as login name just all lowercase.

    Would it be possible for you to add in a Display name option as well?

    Thank you so much for your help guys! sorry I didn’t respond faster.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 13, 2017 at 4:22 pm #9900

    Hey Brajesh, thank for your help on this.

    Having an admin option to choose which username the plugin looks at sounds like a great idea! i look forward to trying it out when its ready.

    Im not sure if the profile is showing the user_nicename or the display name. my guess is it is showing display name but i dont know for sure.
    Also is it really called nicename? or is it nickname?

    thanks again!

    Graham,
    thank you for the info on all those usernames! just to let you know when i tested the plugin using the login names the banlist and friends only settings worked great. the one issue i found i told these guys about on this forum and they immediately updated the whole plugin to fix it and the issue was totally fixed. Its only after more extensive testing i found this issue but i am confident they will get it fixed in no time.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 13, 2017 at 1:29 am #9893

    mine looks similar but it also has a username box above the name box. In WordPress admin under users->profile fields i have a list of the fields (not the WP fields just the BP ones) and i can delete or change whatever i like EXCEPT the username. the username field is labeled “Username(Primary)(required)” ,also in my field group name at the top it says “Profile Information (Primary)”

    Thank you for the help! I really appreciate it.

  • Participant
    Level: Initiated
    Posts: 14
    D W on July 13, 2017 at 12:19 am #9891

    On the registration page for my buddypress site I have one column that says Account details on the left and one column that says Profile details on the right. the Account details has Username, e-mail and password boxes. The Profile details has Username, Email, Fullname and the rest of my buddy press extended profiles fields. Extended profile fields has a username box that i cant remove. when you look at a users profile you only see the second username not the account username. Its my impression that one is for BP profile and one is for WP account. I believe its the Extended Profile fields module of buddypress that is causing this but it is an important part of how my users will interact so i cant turn it off.

    because Extended profiles is showing its username as the display name for users profiles there is no way for users to see each others account names and therefor no way for them to list each other in the ban lists if the 2 usernames(1 user) are different.

    It feels like buddypress shouldn’t do that but it does.

    My registration page is nothing special. its actually blank with buddy press register page option pointed at it.

    Thanks for you help i hope i made more sense this time.

  • Participant
    Level: Initiated
    Posts: 14
    D W on June 30, 2017 at 11:53 pm #9725

    Both plugins now working for me.(so far) Johnny you should try the update it fixed it for me.

  • Participant
    Level: Initiated
    Posts: 14
    D W on June 30, 2017 at 11:51 pm #9724

    Just tested everything with both updated plugins installed and it is working! thank you so much!