Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 4:15 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28676

    by the way, as a visitor, I still can’t see the login page (/wp-admin). It puts me to the redirected page. Maybe we misunderstood each other…. The redirection was for if they failed to log in. But actually, it might just be simpler if we remove the redirection all together.

    The request is only to stop visitors and members of other network sites (except super-admins) from being able to log into the site unless they are members of that specific site.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 4:12 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28675

    Yes, a visitor should not be able to log into the site. Only members of that site should be able to log in (nobody else from the network, unless super-admin of course.)

    As for being able to see the site, there are BuddyBoss privacy settings that supposedly decide whether or not the site will be viewable to visitors or not. (Viewing is a different issue to logging in.) In theory, I can set the site to be private and then create page exceptions. In practice, when I set the site to private, visitors can only see the /wp-admin login page.

    Is there a way I can attach a screenshot for you?

    As for the other issues on my site that occurred rather suddenly: I’ve been chatting with WP Engine (host) and we can only conclude that the page builder (Elementor) was refreshing its style sheets … maybe … with a lag in caching.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 3:16 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28673

    Ok, I will check to see if WP Engine recently applied a WordPress core update. I may need to roll to a back up if there is a problem.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 3:15 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28672

    Your question:

    “1. Do we allow logged out users to access the sub site(do not apply restrictions) and only apply restrictions if a user is logged in and not member of the current site?”

    I’m not quite sure how I should answer that….

    All users (whether logged out or logged in on a different site on the network, such as on the primary site or other subsite) should be restricted from a specific subsite unless they are members of that subsite.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 3:12 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28670
    This reply has been marked as private.
  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 3:11 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28669
    This reply has been marked as private.
  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 3:05 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28667

    Hi again,

    If it’s too complicated to redirect non-members to the no-login page, we can just drop the redirection. The main issue is just to stop network members from logging into subsites where they are not members.

    So that would mean that if they can’t log in (because they are not members of the subsite, even if they are members on other sites in the network), then the login page simply wouldn’t let them in and they would stay looking at it after a failed attempt.

    Please let me know if that works. I have members using this subsite (I’ve put a message up to say we are troubleshooting today) so it would be good to know soon.

    Thanks.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 9, 2020 at 2:40 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28666
    This reply has been marked as private.
  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 8, 2020 at 10:46 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28641

    Actually, I don’t think we even have to wait to see if BuddyBoss will help me out. They don’t provide any support for the plugin (which is free), only their theme, which I’m not using.

    Could you please advise further re troubleshooting request. As you’ve already logged in to have a look, you may have an idea of what is entailed?

    Cheers.

  • Participant
    Level: Enlightened
    Posts: 25
    hangojango on April 8, 2020 at 10:40 am in reply to: [Resolved] BuddyPress Multi Network – troubleshooting set up #28640

    Thanks Brajesh,

    I will ask them but I’m not sure if they will be as responsive as you’ve been.

    I’m just wondering – if they don’t reply to me, could I pay for troubleshooting for you to look at the code? (https://buddydev.com/buddypress-troubleshooting-support/)

    I suspect you’d be the next-best person to take a look after BuddyBoss themselves.