The short answer is that WordPress itself doesn’t consider the username to be sensitive data. Using strong passwords and using two-step authentication via a plugin are good recommendations.
Hmm. I don’t think (might be wrong) that BP has ever supported forwarding in its Messages component. It sounds like something that was on the original feature list, but perhaps never implemented.
Most of the old Ning -> BuddyPress stuff was, I guess, for their 1.0 version; it was all written a few years ago in reaction to some change on their end. I think you’re going to have to spend a bunch of time seeing if the old importers work — if they don’t, you’ll need to write one, or fix it up.
AFAIK, no-one on the BuddyPress core team has tested BuddyPress extensively on HHVM. Also, we do not check our unit tests on HHVM.
Informally, I think our position is along the lines of “once HHVM is officially supported in WordPress core, we’ll officially support it in BuddyPress core.” Note that there’s a difference between “works well” and “officially supported”.
However, if people like yourself want to run BuddyPress on HHVM and report any issues to us (or help us debug and fix them), we’d love that.
If you go to wp-admin > Settings > General, what are the values for the “WordPress Address (URL)” and “Site Address (URL)” fields?
It looks like your site is making its “load more” request to http://www.staging.mysite.com, but the site is intended to be accessible at staging.mysite.com. Is that correct?
Do you have any plugins or unusual server config that are redirecting from www to no-www?
Yep, I know what you’re referring to. It’s a legacy option that’s only important if you’ve the Groups and Forums components enabled, and if you use bbPress 1.
Note that if you’re using the plugin version of bbPress, you’ll be on version 2.x of bbPress, and so this won’t apply to you.
I’ve searched for the phrase “new-review-button” in the BuddyPress code, and it doesn’t exist in BuddyPress. Perhaps it’s introduced by some other plugin on your site, but only when BuddyPress is active? I don’t know.
