Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 4:57 pm in reply to: [Resolved] Prevent subscribers from uploading images? #512

    Hi Achim,
    That is very easy to do. I just need to ask you another question tough. Do you want your subscribers to create galleries? I guess an obvious answer should be no.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 4:20 pm in reply to: Network User Role #509

    Hi Jay,
    I can provide you a solution based on the above two hooks but that won’t be efficient enough.

    Also, Can you please tell me how the network identifies a teacher( role or capability ) and I will post the code.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 10:54 am in reply to: [Resolved] User Role Error Posting Images #505

    Hi JC,
    Thank you for confirming.
    Marking it as resolved. Please feel free to create new topic if you need any help in future 🙂

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 7:26 am in reply to: Network User Role #503

    Hi Jay,
    Thank you for the details.

    To be honest, They are correct. Their plugin is marking the blog non public and BuddyPress hides any non public blog.

    I looked into the sql, the problem is there is no early hook to handle it. The only hooks available are
    ‘bp_blogs_get_blogs’ and ‘bp_hs_blogs’ and if we hook to any of these two, It will be like effectively repeating the whole thing.

    How large is your network?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 7:15 am in reply to: [Resolved] BuddyPress Activity Shortcode Load More #502

    Hi,
    Welcome to BuddyDev forums.
    I just checked and saw that it is showing listing 1-0 of 0 at the bottom of the list. Looking at it right now, will get back to you in next 2 hours.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 15, 2015 at 7:14 am in reply to: [Resolved] User Role Error Posting Images #501

    Hi JC,
    Welcome to BuddyDev forums.

    That message is not generated by MediaPress. Also, MediaPress does not use any role. It checks for the capability of current users.

    Is there any chance that you are using Zero Spam comment plugin?

    I see this message listed in their faq

    https://wordpress.org/plugins/zero-spam/faq/

    Please let me know if the above applies to you.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2015 at 7:45 pm in reply to: Advice on buddypress social login #497

    Hi Ime,
    We had one( Facebook Connect Plus ) which did import all the fields. I have stopped its development due to lack of time and interest of the community.

    I believe wpmudev has a plugin(Ultimate Facebook) that you can buy for $19 and that is known to import the fields etc.

    We will work on our own again in next few months when we have a few more developers as part of our team.

    If the Bp force Profile does not work, i do have a ready to use code(I did it for a client few months ago ) and I will be happy to provide it.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2015 at 7:37 pm in reply to: Network User Role #496

    Hi Jay,
    You are most welcome.

    Since Password protected blogs are not part of WordPress, I believe The Multisite Privacy is protecting it. can you tell me if that plugin says it is BuddyPress compatible? Also, are you comfortable with phpmyadmin? If yes, check for wp_bp_user_blogs and see if there are entries resent there?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2015 at 2:51 pm in reply to: Advice on buddypress social login #492

    Hi Ime,
    Welcome back. It good to have you again 🙂

    I am sorry but I might have missed it, does the plugin allows importing from social network?

    Also, do you want to force users to complete their profile before they can use the site? If forcing is fine, you may give this plugin a try
    https://wordpress.org/plugins/bp-force-profile/ (If It does not work, I can supply you the code)

    If importing from social network is important, then please let me which plugin you are using and if that supports it or not. I may have some more suggestion based on that.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 14, 2015 at 2:24 pm in reply to: Network User Role #491

    Hi Jay,
    Thank you for asking. Sorry, I could not reply on the weekend.

    On a multisite, if a user is part of one site, they don’t get any role on other sites. So, The strategy we need to put is something that can check for user types on al sites.

    Two possible options:-

    1. Paid solution:- Check if multisite privacy supports capability/roles, if yes, Hopefully Andrea’s Network roles plugin
    http://wpebooks.com/network-roles/ can be used to assign teacher a role and allow this roile access to all blogs without new registration.

    2. If the Multisite privacy plugin provides a filter/action we can simply hook to that. The strategy should be in the User Edit page add an extra meta field that identifies the user as teacher. Since this meta is globally available, use it to check for the user and granting access to student blog.

    If you can check the multisite privacy code and Let me know, I can provide code for the 2nd option.

    Hoe that helps.

    Brajesh