Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 18, 2024 at 8:52 am in reply to: [Resolved] Questions to your block user plugin #53921

    Thank you.
    I am assuming that this post was a mistake as you have no access to our plugin?

    I will close the topic as requested.

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 6:42 pm in reply to: [Resolved] Issue with Profanity Blocker not working #53915

    Thank you. I have received the files. You may disable/change password for the account you shared here. I believe we can have full compatibility with this theme. I will update you within next 24 hours with plugin update.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 5:23 pm in reply to: BP Deactivate Account – Bugs #53911

    Hi Katrine,
    Thank you.
    I am glad it worked.

    I will look into the MediaPress and Anonymous activity issue again this weekend and let you know early Monday. We already did one way disabling, achieving two way is a bit complicated but I will give it another try this weekend.

    Have a great day.

    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 5:20 pm in reply to: [Resolved] Issue with Profanity Blocker not working #53910
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 4:59 pm in reply to: BP Deactivate Account – Bugs #53907

    Hi Katrine,
    Thank you.

    I am glad the Profile completion worked.

    There is a bug in BuddyBoss global search causing the fatal error.

    Please open wp-content/plugins/buddypress-global-search/includes/search-types/class.BBoss_Global_Search_Type.php this and change line number 105 from this

    
			return isset( $this->search_results['items'][$itemid] ) ? @$this->search_results['items'][$itemid]['html'] : '';

    to

    
	return isset( $this->search_results['items'][ $itemid ] ) && is_array( $this->search_results['items'][ $itemid ] ) && isset( $this->search_results['items'][ $itemid ]['html'] ) ? $this->search_results['items'][ $itemid ]['html'] : '';

    That will fix it.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 3:47 pm in reply to: [Resolved] Issue with Profanity Blocker not working #53904
    This reply has been marked as private.
  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 3:42 pm in reply to: BP Deactivate Account – Bugs #53903

    Hi Katrine,
    Thank you for your patience.

    1. Global search issue:- Can you please provide me more details about the issue, your Global search settings and deactivate account settings and how to reproduce it. I tried it today and I could not reproduce it.

    3. You can override but it will be gone in next update of that plugin. will suggest posting it to the plugin/theme author for adding it in future update.

    5. I am sorry, the activity privacy is not supported beyond Community Builder pro by us.

    I have enabled the role whitelisting here
    https://github.com/buddydev/bp-profile-completion
    Can you please check and let me know if it works for you?

    I am still looking into Anonymous activity and MediaPress.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 1:37 pm in reply to: [Resolved] How to REMOVE name autocomplete and ability to message multiple people #53899

    Thank you for confirming.
    I am glad it worked!

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 12:58 pm in reply to: [Resolved] How to REMOVE name autocomplete and ability to message multiple people #53897

    Hi Stephanie,
    You are welcome.

    Yes, you can restrict to one participant.

    Here is the code for that.

    

/**
 * Limit message to one participant
 */
add_action( 'wp_ajax_messages_send_message', function () {
	if ( empty( $_POST['send_to'] ) || ! is_array( $_POST['send_to'] ) ) {
		return;
	}

	if ( count( $_POST['send_to'] ) > 1 ) {
		wp_send_json_error( array(
			'type'     => 'error',
			'feedback' => 'Only one participant is allowed.'
		) );
	}

}, 1 );

    Hope that helps.

    Regards
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24766
    Brajesh Singh on December 17, 2024 at 12:16 pm in reply to: [Resolved] How to REMOVE name autocomplete and ability to message multiple people #53894

    Hi Stephanie,
    Thank you for the question.

    If you are using BuddyPress legacy template pack, It is very easy to do

    

/**
 * Disable auto complete for messages.
 */
add_action( 'wp_ajax_messages_autocomplete_results', function () {
	exit;
}, 1 );

    In case of Nouveau, there is no way on server side to identify if the request came from message component or somewhere else. The client side code that enables it is hidden deep in the javascript. While it is certainly doable in nouveau too, It is very much prone to error.

    Regards
    Brajesh