Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on May 30, 2024 at 1:16 pm #52625

    Wow, I can’t believe it’s been that long since I put up a site notice. But it appears that you are correct.

    Once again, thank you Brajesh!

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 10, 2023 at 6:14 pm #50479

    Your system displays notifications if a very different format than mine:

    https://physicscafe.org/wp-content/uploads/2023/09/Screenshot-at-2023-09-10-11-06-50.png

    These two notifications came in at the same time. The mentions notification correctly says “29 seconds” but the forum reply notification is offset by the time relative to UTC “6 hours.”

    I suspect that you are seeing the same thing I am, but your system just says “some time ago” rather than saying 5 hours. I don’t know why the format difference. I *think* I’m using the standard BP formatting (unless the theme changes it). I’m running the newest BP 11.3.1.

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 10, 2023 at 5:28 pm #50477

    Well, your notification says “some time ago.” If you just did it shouldn’t it say “just now” or something like that. My systems all say something like 20 minutes ago or 4 hours ago, but it appears that you are not configured to tell exactly how long it was?

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 9, 2023 at 6:06 pm #50469

    Do you need any more info from me? Just want to make sure I gave you enough to try to reproduce it.

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 4, 2023 at 3:16 pm #50417

    I’d rather wait and see if you can try it, to make sure that it’s not something specific to my sites. Also I don’t know if it should be reported against bbPress or BuddyPress. It seems like the problem only happens when BP provides a notification for the bbP post. The forum times on bbP itself seem good (as far as I can tell). So I don’t know how to tell which plugin is in error.

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on March 17, 2023 at 6:00 pm #48818

    Thanks Brajesh, that’s perfect. I see it there. I can just loop through and unserialize to look for the values I need. Thanks so much!

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on October 7, 2022 at 1:15 am #46821

    Thanks Brajesh, that’s great. I see it there in usermeta. That’s exactly what I was looking for. -Mike

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 23, 2022 at 6:44 pm #46625

    I appreciate your advice on this. It took me a while to try it.

    I have deleted basically all the content from buddypress/activity/post-form.php (in my child override directory). Now the file just looks like:

    

<?php
/**
 * BuddyPress - Activity Post Form
 *
 * @package BuddyPress
 * @subpackage bp-legacy
 * @version 3.0.0
 *
 */

?>

    This *appears* to work. Does that look right? I do need the closing ?> at the end, right?

    Mike

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 23, 2022 at 2:50 pm #46622

    The code appears to work on my test site. I updated the bbP ticket:
    https://bbpress.trac.wordpress.org/ticket/3454#comment:2

  • Participant
    Level: Initiated
    Posts: 18
    Mike Witt on September 20, 2022 at 12:13 am #46585

    Thanks Brajesh. I wasn’t sure if it was BP or bbP. Do you know if there’s a bbP track bug for it? I’ll also ask on the bbP forum. I’ll let you know if I manage to try the fix.

    Mike