Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 3:38 pm #636

    Thank you, I noticed last night after posting this that there are two references to a lightbox on the activity page(s). One is when you click a photo that was only uploaded to the activity feed, the other is when its a gallery photo being mentioned on the activity feed, which opens the ‘lightbox’ with the comment textarea.

    The main issue I posted this.. I do not see anything change when I turn lightbox on or off in your settings.

    Thanks again for all your help.

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 3:36 am #629

    “In this popup the left and right arrows don’t do anything, but if I focus the textarea and hit left or right, it leaves focus of the textarea.”

    I’m referring to the left and right arrow keys on the keyboard..

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 2:29 am #626

    I contacted the custom post plugin author for a work around. I’ll post it here if I find anything.

    I think I am actually ok without the custom post plugin for now.

    Glad to be back to integrating MediaPress into my site, it’s gonna be sweeeet!

    Thanks again, you were such a help today.

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 12:31 am #624

    https://wordpress.org/plugins/custom-post-type-permalinks/

    This is the culprit. Deactivating this plugin makes the links work properly.

    With the plugin active, I am able to get to the pages if I have the right link.

    Thanks again for your time, hopefully this saves someone else the trouble.

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 12:17 am #623

    I have 41 plugins at the moment :/ some for testing, most for production. That is why I tried bugging you instead of turning stuff off. You have helped me a lot so far though, I have a better understanding of whats going on after talking with you, thank you very much.

    One last favor if you get a chance, mpp-gallery/’galleryname’// <– what is missing there? Maybe I can track that down.

    Thanks a hundred more times!

    I’ll let you know what the final result is.

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 29, 2015 at 12:02 am #619

    So I just realized the wordpress/buddypress/pages/gallery dropdown is for the directory page and the define MPP GALLERY SLUG is for the user’s slug..

    So I goto a user, click gallery and see the galleries for that user.. if I click any links, the title, view, upload or delete, it goes to domain.com/mpp-gallery/’galleryname’//manage/add?_wpnone=###&gallery_id=152.

    I noticed this page has an error in the console(which I somehow can’t reproduce now without changing anything): GET file domain.com/snarf/mediapress(something, can’t remember). The issue is ‘snarf’ is a user, but not the one I am attempting to view a gallery for.

    What would I have to do to ‘reset’ mediapress? Clean plugin install and clear some database entries? Thanks again!

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 28, 2015 at 11:40 pm #615

    define( ‘MPP_GALLERY_SLUG’, ‘photos’);
    I do not remember this doing anything more than wordpress/buddypress/pages/gallery dropdown.

    Yes the fact that mpp-gallery pops into the url is confusing me but thank you for clarifying mpp-gallery is the directory page, I will go attempt changing your plugins settings for the directory and see if I notice anything.

    I just realized, maybe this directory page slug and my username/slug are conflicting due to me trying to configure them the wrong way. Another thing I just thought about is I am using a define() or plugin that changes my urls from domain.com/members/membername to domain.com/membername, I’ll see if this has any role in the issue.

    Thanks again!

  • Participant
    Level: Initiated
    Posts: 8
    Micah Coffey on September 28, 2015 at 11:30 pm #613

    Thank you for such a quick reply! I think at this point the easiest thing to ask would be, why would clicking submit on create new gallery attempt going to domain.com/wpp-gallery instead of the slug set via wordpress/buddypress/pages/gallery dropdown? I have a feeling this is the root of the issue.

    Thanks either way, looks like I will have to rip everything apart at some point and see if I can locate the conflict.

    Thanks for your hard work.