BuddyPress.org

BuddyPress 2.3.2 is now available. This is an important maintainance and security release for the 2.3 series, and all BuddyPress installations are recommended to upgrade as soon as possible.

BuddyPress 2.3.0 introduced a vulnerability that could allow an unauthenticated user to view the subject lines of a BP user’s private messages by manipulating an AJAX request. This vulnerability was reported by Mike Saunders. The BuddyPress team independently discovered and fixed a related vulnerability that could allow an authenticated user to view the subject lines of a different user’s private messages, also by manipulating an AJAX request.

This release also includes fixes for four bugs introduced in the 2.3 series.

Update to BuddyPress 2.3.2 today in your WordPress Dashboard, or by downloading from the wordpress.org plugin repository.

Questions or comments? Check out 2.3.2 changelog, or stop by our support forums or Trac.

The first WordCamp Lyon took place last Friday, June 5th, on a large houseboat called “The Platform”. I do not know if any WordCamp has ever been held on a houseboat before. But if there is none in the history of WordCamps, then #wplyon (the even’ts official hashtag) was the first ever floating WordCamp!

For 40 minutes, we set sail for BuddyPress and I was the “captain” of a workshop whose subject was “Boost some of your WordPress projects using BuddyPress.”

Read more →

Hello again! Remember Wednesday when we released 2.3.0 Livio? Well… it was so incredibly outstandingly good, that today we are releasing 2.3.1 to celebrate it.

BuddyPress 2.3.1 fixes two new accidental features that were causing problems in some installations:

• We accidentally relocated the bbPress external for legacy forum installations, so we’ve moved it back to its proper location so everyone that enjoys running 4-year-old versions of bbPress can continue to do so. See #6480.
• We accidentally removed the ability to nest the “Members” directory underneath another page. It turns out this is not an uncommon configuration, so we un-removed it. See #6475.

If you just updated to 2.3.0, we’re sorry Mario, but your princess is in another castle. If you have not updated to 2.3.0 yet, you can now update to 2.3.1 with a suntan and a grin.

We’re also already starting work on BuddyPress 2.4.0, and we want your help with it. Reach out in the forums, IRC, or Slack if you’re interested.

Please welcome BuddyPress 2.3.0 “Livio”!

Here are the new features the BuddyPress team is really excited about in this release.

A New UI for Avatar Creation

This new “mobile-ready” interface includes an “Upload” tab, letting you drag and drop any image you choose to upload as your profile photo. If your laptop has a camera and you are using a browser supporting webcam video stream access, upload a “selfie” using the “Take Photo” tab!

This new interface is available for member avatar management on the front end (member’s Change Profile Photo screen) as well as in the Dashboard (Extended Profile tab in User’s administration screen). The UI is also available on the front end for groups avatar uploads.

The Avatar UI is built on top of our new Attachments API, the long-awaited foundation for media-related BuddyPress components and features.

 
Read more →

It’s almost a month to WordCamp Europe, and we can’t wait! The conference, which is rapidly becoming one of Europe’s largest WordCamps, always attracting an intelligent and diverse audience of WordPressers. At time of writing, tickets are still on sale, but if you haven’t got yours yet, move quickly!

The BuddyPress team find any WordCamp very valuable as they let us talk directly to people who use the plugin, which keeps us up-to-date with how well the plugin is being received within the WordPress community. It also gives us an opportunity to listen to your feature proposals and BuddyPress ideas.

Paul Gibbs from the BuddyPress team is attending this year’s conference. BuddyPress will be one of the available contribution groups at the conference’s contributor day, so if you’d like to learn how to contribute back to BuddyPress, we invite and welcome you to join us! Paul’s recorded a message for WordCamp Europe attendees:

For more information about WordCamp Europe’s contributor day, and how to register for it, please visit the WordCamp Europe website.

BuddyPress 2.3.0 Release Candidate 1 is now available for testing. Please download the 2.3.0-rc1 zip or get a copy via our Subversion repository. If you are a plugin or theme developer, or are running a BuddyPress powered site with a development environment available, your help testing is greatly appreciated.

A detailed changelog will be part of our official release notes, but check out the 2.3.0 Beta 1 post for the rundown of our favorite changes until then.

Let us know of any issues you find in the support forums and/or on our development tracker.

BuddyPress 2.3.0 Beta 2 is now available for testing. Please download the 2.3.0-beta-2 zip or get a copy via our Subversion repository. If you are a plugin or theme developer, or are running a BuddyPress powered site with a development environment available, your help testing is greatly appreciated.

A detailed changelog will be part of our official release notes, but check out the 2.3.0 Beta 1 post for the rundown of our favorite changes until then.

Let us know of any issues you find in the support forums and/or on our development tracker.

Thanks again for your help. BuddyPress 2.3.0 is going to be awesome!

This report presents the results from the 2015 BuddyPress Survey held from Feb. 18 – April 8, 2015. Two hundred eleven developers from 42 countries contributed to BuddyPress by participating in the survey. Thank you.

Goal of the Survey

Guide the direction of BuddyPress plugin development in 2015.

Objectives

1. Discover current BuddyPress usage.
2. Gauge user interest in potential new features.
3. Identify key areas for improvement.
4. Prioritize areas of BuddyPress development.
5. Set benchmarks to streamline development processes.
6. Identify volunteers who are interested in contributing to BuddyPress.

Read more →

BuddyPress 2.3.0 Beta 1 is available for testing. Please download the 2.3.0-beta1 zip or get a copy via our Subversion repository. If you are a plugin or theme developer, or are running a BuddyPress powered site with a development environment available, we’d love to have your help with testing.

A detailed changelog will be part of our official release notes, but until then, here’s a rundown of some of our favorite changes. (Check out this report on Trac for a more detailed view.)

• The new Attachments API will allow developers to more easily manage user-generated media, and is the long-awaited foundation for media-related BuddyPress components and features.
• Core Theme Companion Styling improves BuddyPress’s integration with the latest two bundled WordPress core themes, Twenty Fifteen and Twenty Fourteen.
• The Avatar Upload UI has been completely revamped, with drag-and-drop upload, improved mobile support, & integration with phone/laptop cameras.
• Blog Post Activity generates better looking excerpts when posts contain images or other embedded media content.
• Star Private Messages allows for improved marking of important inbox messages.
• The Member Types API now supports member-type-specific directories.
• Continued object & query cache enhancements.
• Tons of under-the-hood improvements.
• Continued coverage of inline code documentation, actions, & filters.

2.3.0 is almost ready, but please do not run it in a production environment just yet. Let us know of any issues you find in the support forums and/or on our development tracker.

Thanks everyone for all your help, and we are excited to release BuddyPress 2.3.0 in early June!

BuddyPress 2.2.3 is out, which fixes several instances where URLs were not made safe (escaped) for output to the browser. If you’re using any version of BuddyPress and have not yet updated, please do so right away. If you need help, please reach out in our support forums and someone will be happy to assist you.

The BuddyPress team worked closely with the WordPress core team and several other plugin authors to coordinate the release of 2.2.3 alongside other libraries with similar issues.

These fixes have also been ported over to what will be 2.3, which we continue to run here at BuddyPress.org.