Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 16, 2017 at 5:07 pm in reply to: BuddyPress Message Privacy help #9934

    D W,

    Buddypress already displays the nicename. As I said, it’s the @name that is shown in a member’s profile page.

    • This reply was modified 7 years, 5 months ago by Graham.
  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 16, 2017 at 4:36 am in reply to: BuddyPress Message Privacy help #9929

    D W

    Yes the nicename is by default the same as the login name. The only name users can change is the display name.

    If you block by display name, and someone changes theirs, the block will no longer work.

    That’s why nicename is the better choice, it never changes and can be set by the site owner when a member joins (either through a plugin as I mentioned or in phpmyadmin) and is visible to members as their @name

    Using the login name reveals one half of a user’s security information and is a bad idea.

    I think it would be very difficult for Brajesh to make the plugin track display names, but you never know.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 10:14 am in reply to: BuddyPress Message Privacy help #9922

    What a legend! Works perfectly. Stops by nicename only.

    Did several tests and everything worked as it should, including the plugin update.

    Adds a facility that is a very important option for members on my type of website.

    For D W, if you want to be able to change the nicename from your WP admin panel, use the plugin “User Rename by Azed”. Otherwise you would have to manually edit the database via phpmyadmin in your hosting cPanel.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 9:40 am in reply to: BuddyPress Message Privacy help #9921

    Thanks. Will do – when my hosting company comes back online!

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 8:01 am in reply to: BuddyPress Message Privacy help #9918

    Don’t know if it’s related, but I only have ONE php file in my plugin – “buddypress-message-privacy.php”

    There is no “bp-custom.php” or any other php file.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 7:41 am in reply to: BuddyPress Message Privacy help #9915

    Do I have to add the code above to my child functions.php file?

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 7:23 am in reply to: BuddyPress Message Privacy help #9914

    I can’t see anywhere to set that. I have a very busy dashboard and can’t find that. Where do I set that?

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 7:14 am in reply to: BuddyPress Message Privacy help #9912

    Hi Brajesh,

    Set up the BuddyDev dashboard and verified API key. Then bought the plugin with 12 month’s support.

    Installed the plugin and set my own (and two test members) to allow all.

    Now, neither I nor the other two members can send any messages. You get an error saying you did not select a recipient, even though they are showing in that field.

    Deactivated the plugin and messages worked again.

    What am I doing wrong?

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 6:18 am in reply to: BuddyPress Message Privacy help #9911

    Hi Brajesh,

    Thanks for clearing that up. I will check it out.

  • Participant
    Level: Enlightened
    Posts: 64
    Graham on July 14, 2017 at 5:02 am in reply to: BuddyPress Message Privacy help #9909

    Thanks Brajesh,

    Please let me know when the new version works and comes out, so I can order it.

    Since I have never used any of your software, if I order only one months support and at a future date the plugin stops working properly due to a WP upgrade, what happens?

    Do I just order another month’s support? If so, do I have to re-install the plugin, or will it update itself by overwriting the existing one?

    Thanks,
    Graham