Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 3
    Dorian Logan on March 1, 2022 at 4:19 pm #43651

    We are doing the following

    To disable activation email, add following line to child-theme’s functions.php
    — add_filter( ‘bp_core_signup_send_activation_key’, ‘__return_false’ );

    After deactivating activation, user should be directly activated. So add following line to wp-config.php
    — define( ‘BP_SIGNUPS_SKIP_USER_CREATION’, true );

  • Participant
    Level: Initiated
    Posts: 3
    Dorian Logan on February 28, 2022 at 10:11 am #43608

    Hi,

    This thread went quiet – as we managed to disable the activation email and associated process. Sadly our approach has stopped working with recent updates from BuddyBoss Plugin.

    What would you recommend?

    We are logging our users in via a 3rd party endpoint (custom) they are already validated etc.

    D.

  • Participant
    Level: Initiated
    Posts: 3
    Dorian Logan on November 5, 2020 at 9:07 pm #34347

    Option 2 looks good – fyi we are running buddyboss stack.

    Can you help with a filter so only first, last, company name are public. All other items are hidden.

    With this filter also fix rest API queries?

    Really appreciate your assistance

    D