Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 10
    Rik on November 7, 2023 at 4:04 pm #50838

    Hi Brajesh,

    I did use the comlete url:

    https://staging23.wattlesfarm.com/members/me/profile/

    This brings up my admin profile (username: hendrik):

    https://staging23.wattlesfarm.com/members/hendrik/profile/

    However, if I login as another user using the */me/profile/ link it will still bring up my admin profile and not the profile of the user I’m logging in as. So the hendrik-profile seems to be persistent.

    Any thoughts/suggestions?

    Best

    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on November 3, 2023 at 3:51 pm #50824

    Thank you both!

    I changed the link to /members/me/profile/

    When I’m logged-in it does indeed bring me to my profile.

    However, when I login as a different user, the me-link still brings up the hendrik-profile instead of the new user’s profile!

    Looks like “me” is still associated with “hendrik” and not the logged-in user’s individual profile.

    Any suggestions why and how to solve that?

  • Participant
    Level: Initiated
    Posts: 10
    Rik on November 3, 2023 at 4:46 am #50818

    Just to clarify further…

    I can directly go to “my” profile from anywhere on my website by using the following URL:

    https://wattlesfarm.com/member-portal/members/hendrik/profile/

    Is it possible to change my username “hendrik” to the generic field “username” so that all users are automatically directed to their specific profile when using the following link:

    https://wattlesfarm.com/member-portal/members/username/profile/

    I hope this makes sense…

    Best

    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on November 3, 2023 at 4:14 am #50816

    Thanks!
    Best
    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on October 24, 2023 at 2:21 pm #50788
    This reply has been marked as private.
  • Participant
    Level: Initiated
    Posts: 10
    Rik on October 16, 2023 at 5:13 pm #50740

    Hi Brajesh,

    The issue was caused by an environment setting in the SiteGround Speed Optimizer plug-in. Under the environment tab is the heartbeat setting. It was switched off by default for the frontend for site performance reasons. I modified the WordPress heartbeat for the site frontend which solved the problem.

    Best
    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on September 21, 2023 at 4:32 pm #50576

    Hi Brajesh,
    Just FYI…
    Looks like the problem was caused by the “Buddypress Registration Options”-plugin. There seems to be an incompatibility issue with BuddyBuilder. The problem was resolved by deactivating the plugin.
    Best
    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on September 15, 2023 at 4:48 pm #50528

    Thanks for the feedback Brajesh!

  • Participant
    Level: Initiated
    Posts: 10
    Rik on September 15, 2023 at 4:33 pm #50527

    Hi Brajesh,

    Right now I’m evaluating BuddyBuilder and I’m using the BuddyBuilder Pro Templates. I’m still trying to figure out how to edit their template and how to add the “Add Friend” button. Also, I’m using the Hello Elementor Theme.
    I like the BuddyBuilder concept of using Elementor to edit and style my BuddyPress pages. However, their documentation is very sketchy and so is their support! So, I’m making very slow progress…

    Best
    Rik

  • Participant
    Level: Initiated
    Posts: 10
    Rik on September 6, 2023 at 6:09 pm #50440

    Hi Brajesh,
    Yes, SiteGround (hosting company for our website) has a lazy loading feature as part of their SG Optimizer. I disabled that particular feature and that solved the problem!
    Best,
    Rik