BuddyPress.org

That message “Are you sure you want to do this? Please try again” is a nonce failure message. Did you upgrade and not upgrade the bp themes? All bp code is now ‘nonce security’ aware. If your themes don’t send these ‘nonce’ values to bp everything comes to a screeching halt.

For example:

<p><input type="submit" value="<?php _e( 'Save Changes', 'buddypress' ) ?> &raquo;" id="save" name="save" /></p>



<?php wp_nonce_field( 'groups_edit_group_details' ) ?>

That’s taken from the edit group details form. wp_nonce_field() creates a little hidden field with an access key for ‘groups_edit_group_details’ that gets compared in to a similar ‘nonce’ value generated in the actual function that does the validation and saving of group details. If they don’t match, the security check fails with that cryptic message from wpmu.

Howdy, using the functions from functions.php is required for some things to work right in bp. That has nothing to do with the new security system.

Every form, every url that leads to any kind of maintenance capability in bp is now covered by that nonce security. If the form or url leads to changing data in bp it *must* have this feature integrated in the code. It’s a wp 2.7 thing and bp takes advantage of it.

These wp_nonce_field() calls and wp_nonce_url() calls are everywhere. Every url, every form, every maintenance function has one now.

To give you an idea of the scope, search for ‘wp_nonce_field’ and ‘wp_nonce_url’ in /mu-plugins

40+ matches for ‘wp_nonce_url’

50+ matches for ‘wp_nonce_field’

Yes, that would be the best way Phil. That way you have all the ‘nonce’ goodies.