Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on January 2, 2021 at 1:36 pm #35182

    hi Brajesh,

    I’ve followed your suggestions above but no change.

    I also apologise for the delay in following this up, in direct contrast to your speedy response! When I get the time to dedicate to this, I will debug it in earnest – at which point your pasted code snippet will no doubt be helpful in locating the issue.

    Meanwhile I’m marking this as resolved as I am almost sure it is a local issue.

    ps. Happy New Year 🙂

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 30, 2020 at 9:08 am #34713

    hi Brajesh,

    thanks and yes, it’s been a very busy time 🙂

    So, the gallery are public public.
    The permissions on the media are also public.
    All my material is set to public.

    However, the default Dash -> MediaPress -> Settings -> General -> Privacy Settings

    Default status for Gallery/Media is set to
    
    “Logged In Users Only” (It will be used when we are not allowed to get the status from user)

    Perhaps this is kicking in unexpectedly?

    This is not clear yet, but if so, how can I/we check or control the permissions, to avoid this issue?

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 29, 2020 at 6:39 pm #34700

    ps. I have Dash -> MediaPress -> Settings -> BuddyPress

    Automatically Publish to activity When? 

    New Gallery is created. (no)

     New Media added/uploaded. (yes)

    pps. I’m using MediaPress v1.5.1

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 19, 2019 at 1:49 pm #26547

    as always, thanks for your prompt and helpful feedback.

    Thanks Brajesh!

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 19, 2019 at 8:46 am #26528

    hi Brajesh,

    did anything come of this, did you get to updating the notifications title/URL?

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 14, 2019 at 7:31 am #26453

    hi Brajesh,

    that’s ok, I’ll figure something out, maybe 🙂

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on November 13, 2019 at 8:01 am #26438

    hi Brajesh,

    this particular issue is on the gallery itself, eg; /members/profile-nnnn/mp/me-34/

    So a member sees the gallery of say 16 images, and makes a general comment on it which adds a text-only entry to the feed. I believe you said previously that gallery comments were handled differently to media comments, which is entirely reasonable. I had something similar to this with the (buddyblog) blogs, which also adds a “plain” comment to the feed.

    For the blogs, I built an action trigger to add an entry into the feed and to parse the blog (database record/s) for any included media using the parent_id = blog_id. I imagine something similar could be done for the galleries. In an ideal world this could be configurable to include a random image, or say up to 3 thumbnails, in the feed entry.

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on October 29, 2019 at 2:39 pm #26191

    Yep, I use BuddyBlog too. It’s simple and very effective. Hopefully Brajesh will find time to do an update to it soon, even if it’s only a refresh/cleanup of the existing codebase.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on September 10, 2019 at 11:19 am #25267

    hi Brajesh,

    ok, I’ve done that, and I think that’s *much* better!

    Strangely I don’t see the media when commenting from the media itself, only when from the activity feed. As this is the common case, it’s no *so* important, and I appreciate your quick-fix hugely!

    I’ll close this now, as *this* is fixed. Naturally looking forward to your final solution when it arrives and fixes the myriad and complex media/comments/gallery/images/etc. things 🙂

    Many thanks

    R.

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on September 6, 2019 at 7:55 am #25216

    impatient end-users… 🙂