Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 4:38 pm in reply to: [Resolved] Blog only showing one set of comments for all blogs #16896

    Hmmm. I just updated my themes. Even though I’m using a child-theme, maybe that’s introduced some confusion. Will look and feedback…

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 4:27 pm in reply to: [Resolved] Blog only showing one set of comments for all blogs #16895

    I don’t think I’m using any form of template modification here. I’m only using the following modified templates sitewide.

    wp-content/themes/theme_name/
├── buddypress
│   └── members
│       ├── index-register.php
│       └── single
│           └── home.php
├── footer.php
├── mediapress
│   └── default
│       ├── buddypress
│       │   └── activity
│       │       └── views
│       │           └── grid-photo.php
│       └── shortcodes
│           └── grid-photo.php

    I’ll take a look at the code and see if there’s a reason the post_id might be modified from somewhere…

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 4:15 pm in reply to: [Resolved] Buddyblog users "are not allowed to edit this item" #16893

    Ok, now I’m confused. I’m fairly sure I haven’t changed anything, but now the BB edit link is working exactly as expected – ghosts in the machine. >:=( (grumpy face). Closing as irrelevant, and if it happens again as Arnie said, I’ll be back…

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 11:35 am in reply to: [Resolved] Mediapress direct link to file functionality? #16891

    ps. nice functionality – good work!

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 11:27 am in reply to: [Resolved] Mediapress direct link to file functionality? #16889

    Ah, I think I see the problem. I have to click on the “Add Media” button FIRST, and only THEN does the add_remote_media_link field appear. Was not clear… closing.

    (although I don’t understand why my admin could see the field in the first place. Never mind, not so important now.) Thanks Brajesh for the patience!

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 21, 2018 at 7:12 am in reply to: [Resolved] Mediapress direct link to file functionality? #16885

    In every case, I have [yes] selected:

    Remote Media Settings
Control the remote media behaviour.
Enable adding media through link?	 [Yes]
 No
If No, It will completely turn off remote file and links features.
Enable adding direct link to files from other sites?	 [Yes]
 No
User will be add to remote files using direct url eg. http://example.com/hello.jpg
Download the file to your server?	 [Yes]
 No
When a user adds a remote file, should it be automatically downloaded to your server? We strongly recommend enabling it for photo.
Enable oembed support?	 [Yes]
 No
Allow users to add links(videos,photos) from youtube, vimeo, facebook etc easily.

    :\

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 20, 2018 at 7:32 pm in reply to: [Resolved] Mediapress direct link to file functionality? #16876

    aha, I don’t see that box as a normal (contributor) user. However, I do see it as the admin user, implying some kind of role/capabilities mis-match. Is there a particular capability which must be assigned?

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 20, 2018 at 6:46 am in reply to: [Resolved] Buddyblog users "are not allowed to edit this item" #16860

    Wait a sec. this might be it, and is too obvious to be seen. For some reason the LINK to edit the blog is wrong. Instead of the correct:

    site_url/members/richinud/bb/edit/189574/

    I get the wrong URL which sends the user to the backend:

    site_url/admin/post.php?post=189574&action=edit&lang=en

    I’ll dig around and see if there’s a place I’m changing the edit link from and post back here later…

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 20, 2018 at 6:39 am in reply to: [Resolved] Free support, rude insults and threats #16859

    Moving along 😉

  • Participant
    Level: Master
    Posts: 279
    Richard Foley on August 20, 2018 at 6:38 am in reply to: [Resolved] Buddyblog users "are not allowed to edit this item" #16857

    The users have edit_posts, and are contributors, yes.

    Setting manage_options for admin edit permissions shows the same behaviour.

    Strangely, if I add edit_published_posts to the contributor roles (users), then they are sent straight to the backend. (which is not wanted in this case).