Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on January 12, 2025 at 9:24 am #54594

    Hello Brajesh

    I tried downloading the Anonymous update from my profile page, but it dosen’t seem like I have access to this?

    Why?

    Thanks! 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on January 1, 2025 at 10:31 am #54446

    Hello Brajesh

    It would make sense for the Anonymous activity to only show up in the “main activity feed”. Also the user who posted the activity should be able to see their own posts on their personal activity feed. I’m not sure if it is possible to somehow “hide” anonymous activity if they’re on any of the other sub-tabs? – if that makes sense? 🙂

    Is there any way I can get support on this (privacy plugin?) – I need this to work even if I have to pay my way out of it lol.. I’ve tested some custom code myself, but I can’t seem to make it work like inteded.

    Thanks! 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on January 1, 2025 at 10:02 am #54445

    Hello Brajesh

    Happy New Year to you too! 🙂

    The issue only persists with media uploaded from the Activity Wall.
    If I create galleries manually on my profile (front-end) there are no issues.

    These show “View [NAME]”.

    So it only seems to be a problem on the folder generated from media uploaded from the activity stream.

    I just ran some troubleshooting on my staging site and this is only with mediapress, cera theme and the required plugins active. The issue is still the same in that case.

    Also tested on both Twenty Twenty-Five and Twenty Twenty-One and both of these themes also has the same issue. 🙂

    Also not a cache issue – tested that too. 🙂

    Hopefully that helps!

    Thank you once again 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on January 1, 2025 at 9:33 am #54444

    Hello Brajesh

    This is the same issues I ran into when trying to configure it, I also managed to get the “warning/notice”, but without being able to “stop” the activity from posting – and for this reason I ended up with the post anyways.

    I appreciate you looking into this for sure.

    I’ll just keep a warning notice on the form for now, that activates whenever a user choose to post as anonymous. My members will just have to get used to NOT posting media when they’re posting something as anonymous.

    Thank you anyways! 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 31, 2024 at 1:59 pm #54436

    Also – this made me aware that there is also an issue with your “BuddyPress Activity Privacy” plugin.
    If a member created activity and marked it for “followers/friends only” and a user go to their own activity page and under the “friends” tab – then ALL activity is in there too. Even if it has been marked as “private/for followers only”. The Anonymous posts are also in here too.

    This would need a pretty urgent update.

    Thanks

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 27, 2024 at 1:33 pm #54300

    Hello @sbrajesh

    Anything new on this one? 🙂

    Thanks!

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 27, 2024 at 1:32 pm #54299

    Hello Brajesh

    Sounds great – look forward to it! 🙂

    Thank you – and happy new year! 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 17, 2024 at 5:46 pm #53912

    No worries! 🙂

    Yeah I can imagine, but I’m sure a lot of your customers and users will be happy about this feature for sure. 🙂

    Fingers crossed it’ll work, since that would be amazing!

    No rush! – keep me updated when possible.

    Thank you 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 17, 2024 at 5:08 pm #53909

    This worked! – Amazing! 😀

    Thank you so much! 🙂

    No the only thing left on the wishlist (I believe) is the Annonymous x Mediapress (that would be amazing). 🙂

    I would love for this to be fixed before the launch on 1st og january (if possible).

    I understand if you’re busy at this time of the year and it would not be the end of the world if this is not possible within this point. Like mentioned I got a warning showing at the moment, but would love for them to be compatible if feasable. 🙂

    Thank you for the amazing support once again! 🙂

  • Participant
    Level: Enlightened
    Posts: 75
    Katrine Spencer on December 17, 2024 at 4:32 pm #53906

    Ignore this part (turns out it didn’t check the yes box on the whitelist page – I was sure I did that lol):
    ** Seems to be working – yes ** 🙂

    I have enabled the role whitelisting here
https://github.com/buddydev/bp-profile-completion
Can you please check and let me know if it works for you?