Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on July 20, 2016 at 1:46 pm #4727

    Hello Brakes,

    The link you sent worked fine on Chrome. Like you suggested, it’s probably a theme issue. I’ll get in touch with the theme developers to get some answers. Thanks.

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on July 20, 2016 at 1:13 pm #4725

    The first screenshot is the blank gallery page. The second screenshot shows the grey box that appears instead of the actual albums on the gallery page.Thanks for the help.

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on July 20, 2016 at 12:49 pm #4724

    Hello Ravi,

    Thanks for the help. I noticed the problem only occurs on Chrome on Android. I tried with Mozilla on Chrome and it worked fine.

    I have attached a link to screenshots of the issue on Android Chrome. Thanks a lot.

    https://drive.google.com/folderview?id=0BwqlyYJhPsG2cTUyRGxBWm9TeWs

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on March 28, 2016 at 6:42 am #3195

    Hey Brajesh,

    Who would have thought that was the issue? Awesome support! Thanks a lot for your help.

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on March 28, 2016 at 12:16 am #3186

    Hello Brajesh,

    I have sent you a private message with the details. The site is live. Thanks again.

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on March 27, 2016 at 11:13 pm #3182

    Hi Brajesh,

    Thanks for your kind help. Followers and BuddyDrive work just fine. I’m just not sure why creating a gallery isn’t working.

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on March 27, 2016 at 9:49 pm #3178

    I’m using Buddyboss Boss theme. It’s Buddypress specific. Hope this debug info can help:

    WordPress Version: 4.4.2
    Permalink Structure: /%postname%/

    Active Theme: Boss. Child Theme 2.1.0
    Parent Theme: Boss. Child Theme 2.1.0

    Registered Post Stati: publish, future, draft, pending, private, trash, auto-draft, inherit, closed, spam, orphan, hidden, wc-pending, wc-processing, wc-on-hold, wc-completed, wc-cancelled, wc-refunded, wc-failed

    // Browser Details //
    Browser Name: Chrome
    Browser Version: 49.0.2623.87
    Browser User Agent String: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36
    Platform: Windows
    // End Browser Section //

    PHP Version: 5.6.19
    PHP Extensions: Core,bcmath,calendar,ctype,date,ereg,filter,ftp,hash,iconv,json,mcrypt,SPL,odbc,pcre,Reflection,session,standard,mysqlnd,tokenizer,zip,zlib,libxml,dom,PDO,openssl,SimpleXML,wddx,xml,xmlreader,xmlwriter,cgi-fcgi,curl,gd,gettext,imap,mbstring,mysql,mysqli,Phar,pdo_mysql,pdo_sqlite,sockets,sqlite3,xsl,sqlsrv,pdo_sqlsrv,mhash
    GD enabled: Yes

    //GD Info
    GD Version: bundled (2.1.0 compatible)
    FreeType Support: 1
    FreeType Linkage: with freetype
    T1Lib Support:
    GIF Read Support: 1
    GIF Create Support: 1
    JPEG Support: 1
    PNG Support: 1
    WBMP Support: 1
    XPM Support: 1
    XBM Support: 1
    WebP Support: 1
    JIS-mapped Japanese Font Support:
    // End GD Info

    MySQL Version: 5.6.26
    Web Server Info: Microsoft-IIS/8.5

    WordPress Memory Limit: 40M
    PHP Safe Mode: No
    PHP Memory Limit: 256M
    PHP Upload Max Size: 10M
    PHP Post Max Size: 8M
    PHP Upload Max Filesize: 10M
    PHP Time Limit: 60
    PHP Max Input Vars: 1000
    PHP Arg Separator: &
    PHP Allow URL File Open: Yes
    WP_DEBUG: Disabled
    SCRIPT_DEBUG: Disabled

    // Table Prefix //
    Table Prefix: Zwv6b6Y_

    Show On Front: page
    Page On Front: Hoollaa (#649)
    Page For Posts: A Smart Saver’s Tricks (#89)

    Session: Enabled
    Session Name: PHPSESSID
    Cookie Path: /
    Save Path: C:\Windows\Temp
    Use Cookies: On
    Use Only Cookies: On

    DISPLAY ERRORS: N/A
    FSOCKOPEN: Your server supports fsockopen.
    cURL: Your server supports cURL.
    SOAP Client: Your server does not have the SOAP Client enabled.
    SUHOSIN: Your server does not have SUHOSIN installed.

    ACTIVE PLUGINS:

    Advanced Database Cleaner: 2.0.0
    Akismet: 3.1.8
    Anti-Malware Security and Brute-Force Firewall: 4.15.49
    Anti-Spam by CleanTalk: 5.38.1
    bbPress: 2.5.8
    bbPress Notify (No-Spam): 1.10
    BP Login Redirect: 2.2
    BP Profile Search: 4.5.1
    BuddyBoss Wall: 1.2.1
    BuddyDev Dashboard: 1.0.1
    BuddyDrive: 1.3.3
    BuddyPress: 2.5.1
    BuddyPress Edit Activity: 1.0.6
    BuddyPress First Letter Avatar: 2.2.6
    BuddyPress Follow: 1.2.2
    BuddyPress Global Search: 1.1.3
    BuddyPress Groups Extras: 3.6.7.2
    BuddyPress Reorder Tabs: 1.0.7
    BuddyPress Username Changer: 1.2.1
    BuddyPress Xprofile Custom Fields Type: 2.4.3
    Contact Form 7: 4.4
    Coupon Creator: 2.2
    CSS3 Responsive Web Pricing Tables Grids: 10.1
    Custom 404 Pro: 1.4.4
    Easy Google Fonts: 1.3.9
    Email Templates: 1.1.3
    Events Manager: 5.6.2
    Form Maker: 1.8.30
    Frontend Uploader: 0.9.4
    GD bbPress Attachments: 2.3.1
    Invite Anyone: 1.3.9
    JCH Optimize: 2.0.3
    Login Security Solution: 0.55.0
    MailPoet Newsletters: 2.7.1
    MediaPress: 1.0.4
    MediaPress – Media View Counter: 1.0.0
    Page Builder by SiteOrigin: 2.3.2
    Page scroll to id: 1.6.0
    Paystack WooCommerce Payment Gateway: 1.0.0
    Post Views Counter: 1.2.0
    Really Simple SSL: 2.3.2
    Regenerate Thumbnails: 2.2.6
    Rename wp-login.php: 2.5.5
    Sabai: 1.3.28
    Sabai Directory: 1.3.28
    Sabai Google Maps: 1.3.28
    SiteOrigin Widgets Bundle: 1.5.9
    Slider Revolution: 5.1.6
    Subscribe To Comments: 2.3
    Toggle The Title: 1.4
    WaspThemes – Yellow Pencil Pro: 5.2.8
    WooCommerce: 2.5.5
    WordPress Popular Posts: 3.3.3
    WordPress Social Login: 2.3.0
    WP-Mail-SMTP: 0.9.5
    WP-Polls: 2.72
    WP Editor: 1.2.5.3
    WPFront User Role Editor: 2.12.4
    WP Smush: 2.1.5
    WP SpeedUp: 1.0
    YouTube Embed: 4.3.4

    // MediaPress Settings //

    active_components: members,groups
    default_status: private
    active_statuses: public,private,loggedin,friendsonly,followersonly,followingonly,groupsonly
    active_types: photo,video,audio,doc
    extensions: jpeg,jpg,gif,png,mp4,flv,mpeg,avi,mp3,wmv,midi,zip,gz,doc,pdf,docx,xls
    mpp_upload_space: 20
    mpp_upload_space_groups: 10
    show_upload_quota: 1
    default_storage: local
    enable_debug: 1
    has_gallery_directory: 1
    has_media_directory: 0
    activity_upload: 1
    autopublish_activities: create_gallery,add_media
    activity_photo_default_view: default
    activity_video_default_view: default
    activity_audio_default_view: default
    activity_doc_default_view: default
    show_orphaned_media: 0
    delete_orphaned_media: 1
    activity_media_display_limit: 5
    members_active_types: photo,video,audio,doc
    members_enable_type_filters: 1
    members_photo_gallery_default_view: default
    members_video_gallery_default_view: default
    members_audio_gallery_default_view: default
    members_doc_gallery_default_view: default
    groups_active_types: photo,video,audio,doc
    groups_photo_gallery_default_view: default
    groups_video_gallery_default_view: default
    groups_audio_gallery_default_view: default
    enable_group_galleries_default: yes
    contributors_can_edit: 1
    contributors_can_delete: 1
    groups_enable_my_galleries: 1
    galleries_per_page: 20
    media_per_page: 20
    media_columns: 4
    gallery_columns: 4
    show_gallery_description: 1
    show_media_description: 0
    enable_audio_playlist: 1
    enable_video_playlist: 1
    enable_media_comment: 1
    enable_gallery_comment: 1
    load_lightbox: 1
    enable_activity_lightbox: 1
    enable_gallery_lightbox: 1
    media_view_counter_count_uploader_views: 0
    media_view_counter_label_views: Total Views %d

    // End of MediaPress Settings //

  • Participant
    Level: Initiated
    Posts: 10
    Olumuyiwa Orowale on March 27, 2016 at 9:32 pm #3176

    Hi Brajesh,

    Thanks for the swift reply! Answers to your questions are:
    1. I’m not using any custom codes for Mediapress.
    2. Yes the problem occurs from user gallery. (when the user clicks “Create Gallery” the initial url reads something like: https://mysiteurl/buddypress-members-page/username/gallery/mediapress before redirecting to the 404 page. “Gallery” is a page I created for Mediapress)
    3. I have video, audio and photo enabled for all users

    Please advise, Thanks again.