[@burtadsit Participant 17 years, 8 months ago]

You might want to look at this: https://codex.buddypress.org/developer-docs/creating-a-custom-buddypress-component/

It’s the dev guide for creating custom components in bp. It also has a complete skeleton component with lots of comments in the source code. Might help.

[@burtadsit Participant 17 years, 8 months ago]

Yes, that would be the best way Phil. That way you have all the ‘nonce’ goodies.

[@burtadsit Participant 17 years, 8 months ago]

Hello, the ‘slug’ can be found by going to the groups directory and looking at the url for the group. An example “My Group” would have an url for the group home page of: http://example.com/groups/my-group

The part at the end of the url that is unique for each group ‘my-group’ is the slug.

I didn’t see any mention of a problem. Did you have a problem?

[@burtadsit Participant 17 years, 8 months ago]

Oh, I see the ‘recent posts’ widget. Ok.

You’ll have to change line 36 in bp-blogs-widgets.php which looks like this now:

---

<a href="<?php echo bp_post_get_permalink( $post, $post->blog_id ) ?>" title="<?php echo apply_filters( 'the_title', $post->post_title ) ?>"><?php echo bp_core_get_avatar( $post->post_author, 1 ) ?></a>

---

That spot at the end there <?php echo bp_core_get_avatar( $post->post_author, 1 ) ?> is the author’s avatar. Replace that code with something that detects an image thumbnail if it exists and switch between the thumbnail and the author avatar.

[@burtadsit Participant 17 years, 8 months ago]

Mornin’ John.

I’ve got my system setup to use deep integration now. This way in bb-config.php:

if (file_exists(‘../wp-blog-header.php’))

require_once(‘../wp-blog-header.php’);

else

if (file_exists(‘../../wp-blog-header.php’))

require_once(‘../../wp-blog-header.php’);

Very first thing under the comment block in that file. I’m also using your code to fix the require_once() problem on both sides.

I deleted *all* the meta data that bbGroups puts into bbpress meta and wp user meta tables. Started completely from scratch. Configured bbGroups to use the utility user and password that is setup in the bp group forums side.

Imported all my test groups and users. Both all users and just users who belong to groups. I get the proper numbers and data. I don’t have 100+ users but that shouldn’t matter. If Andy was going to try and import the 500,000+ users from wordpress.org I’d be worried about the amount of data getting generated.

I don’t think I have to worry about that scenario right now.

I’m not having any problems importing even with deep integration. Lemme know what you find on your side. I have to do some running around today so I’ll be gone till this afternoon. I’ll check back in then.

[@burtadsit Participant 17 years, 8 months ago]

Howdy, using the functions from functions.php is required for some things to work right in bp. That has nothing to do with the new security system.

Every form, every url that leads to any kind of maintenance capability in bp is now covered by that nonce security. If the form or url leads to changing data in bp it *must* have this feature integrated in the code. It’s a wp 2.7 thing and bp takes advantage of it.

These wp_nonce_field() calls and wp_nonce_url() calls are everywhere. Every url, every form, every maintenance function has one now.

To give you an idea of the scope, search for ‘wp_nonce_field’ and ‘wp_nonce_url’ in /mu-plugins

40+ matches for ‘wp_nonce_url’

50+ matches for ‘wp_nonce_field’

[@burtadsit Participant 17 years, 8 months ago]

What kind of problems are you running into?

[@burtadsit Participant 17 years, 8 months ago]

You can use google analytics with bp. Other people are using that package now.

[@burtadsit Participant 17 years, 8 months ago]

It’s better to start a new topic for your kind of issue lorenzocoffee. I flipped the support red light on in this topic. We can do this here. When you start a new topic *you* have the ability to designate the topic as a support question and people will notice.

OK. You’re trying to upgrade from the beta version of bp to RC-1. After uploading and replacing all the files in /mu-plugins and then moving the new themes to the proper locations in /themes and /wp-content, things don’t work.

What does your apache error log say when you try to access your site. What is the url to your site?

[@burtadsit Participant 17 years, 8 months ago]

Not sure what you are asking. You want to replace the blog avatar in what location with what instead?

[@burtadsit Participant 17 years, 8 months ago]

That message “Are you sure you want to do this? Please try again” is a nonce failure message. Did you upgrade and not upgrade the bp themes? All bp code is now ‘nonce security’ aware. If your themes don’t send these ‘nonce’ values to bp everything comes to a screeching halt.

For example:

<p><input type="submit" value="<?php _e( 'Save Changes', 'buddypress' ) ?> &raquo;" id="save" name="save" /></p>



<?php wp_nonce_field( 'groups_edit_group_details' ) ?>

That’s taken from the edit group details form. wp_nonce_field() creates a little hidden field with an access key for ‘groups_edit_group_details’ that gets compared in to a similar ‘nonce’ value generated in the actual function that does the validation and saving of group details. If they don’t match, the security check fails with that cryptic message from wpmu.

[@burtadsit Participant 17 years, 8 months ago]

@plaintext passwords

Nope just comparing text to text. You are using sambauers code even if you don’t know it John. The bp group forums uses Sam’s bbpress live plugin for group forums access. Everbody knows it as just a widget that displays bbpress forums and topics in wp sidebars. It’s alot more than that. It’s got all the capabilities bp needs to create and post to bbpress from bp. It’s all there under the hood. See: /mu-plugins/bp-forums/bp-forums-bbpress-live.php

@doing support here

This is ok. I don’t mind. I talked to Andy about this issue and bluntly asked about it. I know it’s hard to believe, but I’m not very subtle at times. He’s ok with this.

@reverting and things are ok

I’ll revisit this again and wipe things clean on my side. Start from scratch. Test again. When you stop wasting your time sleeping, let me know what your setup is for deep integration. I just need to simulate that on my side.

You do this in bb-config.php?

if ( !defined( ‘ABSPATH’ ) ) {

include_once( ‘/Full/Path/To/wp-load.php’ );

}

I remember it being something more than that. For the admin area also. I’ll start there.

@debugging xmlrpc

Ha! Welcome to the nightmare John.

[@burtadsit Participant 17 years, 8 months ago]

I wish I could just point to one spot in the code and say “here’s where the privacy of a blog is determined” but there isn’t one. I looked through the file /mu-plugins/bp-blogs/bp-blogs-classes.php and found 1/2 dozen spots where functions are asked to return a list of blogs. They all go out and query the wpmu database and in all cases rely on wpmu’s settings for a blog being ‘public’ or not.

You are welcome to take a look for yourself in that file. An example of the problem would be the function BP_Blogs_Blog::get_all()

In that function are two SQL queries that return only public blogs by asking for results: WHERE wb.public = 1

public = 1 is the wpmu indication that this blog is ‘public’. dsader’s plugin simply changes that ‘1’ to -1, -2 or -3 in the table to indicate the ‘more privacy’ options and then looks for those values. It’s behavior is dependent on the values in that spot in the table also.

I don’t see any way to accomplish what you want without a complete rewrite of that entire class. It’s designed to *not* return results for private blogs. That’s exactly what it’s doing.

[@burtadsit Participant 17 years, 8 months ago]

Right now it’s hardcoded in the spots it’s shown like this:

<?php echo ‘https://secure.gravatar.com/avatar/&#8217; . md5( $blog->blog_id . ‘.blogs@’ . $bp->root_domain ) . ‘?d=identicon&s=50’; ?>

It’ll be the same all the time. The blog id being the var in there.

[@burtadsit Participant 17 years, 8 months ago]

You’ll get a message that the user hasn’t created any public blogs when you browse to their profile and just look at their blogs. It’s correct. The don’t have any ‘public’ blogs in bp. The blog directory will never show private blogs. The blogs you have designated as ‘registered users only’ in more privacy are now private blogs. They will not show in the directory.

Right now bp’s view of privacy is black and white. It either is public or it’s not. No shades of grey there yet.

dsader’s more privacy plugin was created before bp. bp doesn’t know about this plugin. The two are completely unaware of each other. Both are behaving normally but not in concert.

[@burtadsit Participant 17 years, 8 months ago]

bp is trapping the /register component like it should in functions.php. There is a fn called bp_show_register_page() that looks for that value and starts the registration process. I tried just entering any arbitrary text instead of /register and it gets me to what I think is a 404 page. So /register is getting detected.

Looking for why it’s getting redirected.

Code looks ok. Works for me. Got me what’s going on Trent.

[@burtadsit Participant 17 years, 8 months ago]

No, you didn’t offend anyone. The widgets are single use only.

[@burtadsit Participant 17 years, 8 months ago]

If I remember correctly the widget’s issue with ignoring the limit was fixed. Some time ago.

[@burtadsit Participant 17 years, 8 months ago]

Hi Chris, nope haven’t heard of such a thing yet.

[@burtadsit Participant 17 years, 8 months ago]

Right now blogs get a gravatar image. No options to change it yet.

[@burtadsit Participant 17 years, 8 months ago]

I guess it doesn’t matter what option you have selected in ‘more privacy’. bp will always think that a blog with anything other than the standard public setting is private. Exactly where and when are you getting a message you didn’t before?

If you use dsader’s plugin and choose any setting other than the first one “I would like my blog to be visible to everyone, including search engines (like Google, Sphere, Technorati) and archivers and in public listings around this site.” then the blog becomes ‘private’ according to bp.

All other settings.

[@burtadsit Participant 17 years, 8 months ago]

Are you using the 2.9.1 version of that plugin jalien? I just downloaded that version from the wpmudev.org site. That’s the code I’ll be looking at.

I’ll look at that code and bp’s and see what’s going on. When you say the site is ‘members only’ what do you mean?

1) I would like my blog to be visible only to registered users from blog community

2) I would like my blog to be visible only to registered members of this blog

How is that blog configured for ‘more privacy’?

[@burtadsit Participant 17 years, 8 months ago]

Updated zip online: http://code.ourcommoninterest.org

Fixed the password save error.

Added better error handling in the authentication routine on the bp side.

Fixed the duplicate template tag function name.

Now when the password is trashed it will give a valid error message instead of nothing.

[@burtadsit Participant 17 years, 8 months ago]

The above scenario matches what’s going on exactly.

1) You can use bp’s group forums because Sam’s password wasn’t changed. It’s coming from wp meta and it matches the utility user password which wasn’t changed either. bp can talk to bbpress.

2) The import fails because my password is trashed. It sends the blank password over to bp which gets checked with Sam’s password and it fails.

Both of us, Sam and I, were too lazy to figure out how to change the actual user’s password instead of just storing it in meta data. Funny thing is I have a ticket in bp trac that complains about the utility username and password being stored in meta data. (sigh)

[@burtadsit Participant 17 years, 8 months ago]

John, I’m thinking that the problem with nothing coming back is related to the bug you found with the password. I think that the bbpress side is sending the correct username but a blank password and the authentication is failing.

On the bbpress side the username and password are saved in meta data. I’m not changing the actual ‘connection user’ password. The same thing is happening on the bp side. sambauers is saving the username and password in meta data.

In this case the bug in my code checked the two passwords and saved an empty string as the password. It send it along to authenticate. It fails and doesn’t return an error message.

Fix would be to save the password again. Three times.

1) Change the password in the bbpress user maintenance screen for the utility user.

2) Change the password in the bbGroups config screen.

3) Change the password in the buddypress config screen.

We’ve got 3 passwords floating around and one is hosed. More than likely the one in my stuff.