BuddyPress.org

Hello all,

I am currently looking into the methods for beefing up the security of a website I’ve been building with BuddyPress before taking it live (spam users, brute force attacks, options around wp-login, SSL etc.).

1. Specifically when it comes to BuddyPress, does a default user with a Subscriber role pose any threats to the integrity of the site or to other users? I ask because I am trying to anticipate what would happen if a user (with Subscriber role) had their account hacked.

2. I have already taken the precaution of hiding the administrator member from being visible to other site users but are there any other issues/precautions I should be looking into?

3. Securing the data of the users is obviously a priority. So I’m just looking for any problems/solutions faced by those using BuddyPress on their sites

Cheers!