Forum Replies Created
-
In reply to: Avatar is skewed and tracker aspect ratio
@meeekz – Is the “jcrop tracker” something that is standard part of buddypress or something that your theme / or other plugins is handling?
re “believe this is an aspect ratio issue” – I was under the impression that bp wanted the image to be cropped in a perfect square, and that there were modifications to make what was displayed circular like you are doing – but the standard bp expected a square image as the base (?)
with one of your members I see that your theme is doing this kind of class on the avatar:
class=”modified avatar” height=”80″ width=”80″>yet the image itself is somehow 80×53
not sure how you got the image to be those dimensions – using the standard bp avatar uploader / cropper thing?
In reply to: BuddyPress and WordPress@natmba1 – you do not need a wordpress dot COM account to run buddypress – and I am not sure that you can run BP there – not the last time I checked.
What I suggest is getting your own web hosting account – for 10 or 20$ per month you can run your own (shared) hosting – and put wordpress and buddypress and any other plugins you like into it.
Some places like dreamhost.com (and similar hosting companies) – make it pretty simple to setup a wordpress hosting account and then you can add plugins and themes through the backend admin dashboard.
You will likely end up with an account at wordpress dot ORG – to ask questions about plugins and stuff – but the dot ORG is the free open community and the dot COM is more the commercial thing kind of like wix.. which I am sure you have seen places like that are very limited – running your own system has many more options – but with that comes a bit more learning and responsibility 😉
In reply to: buddypress and multisite. Having troubles@aju29 – If I were you I would make a zip file backup of all your files (through cpanel or whatever) – then export your database (follow the instructions in the wordpress.org for exporting backups – (you’ll need to go into phpmyadmin -> export – advanced – check “add drop table” – export)
check your server error log to see if there is anything in there that would give a clue when you get the ““insufficient permission to view this page” error.
Check to make sure you have “pretty permalinks” set properly.
IF you deactivate all plugins, and switch to default theme, and things do not work right at that point – something is wrong.. could be your server setup, could be you forget to add the line needed for multi-site to work properly.. go back and re-trace steps..
Then I would start fresh, delete everything and install a totally fresh WP –
Of course you could do this in a different folder or something.. but you need to get wp multi-site and buddypress working with default theme before mucking it up with other plugins and themes.. once you establish that the basics work with your server and setup – then start adding the other stuff one by one to see if something breaks it.
Someone else may have an idea of what your trouble is and chime in – I don’t know your exact setup and what your exact issues are when you are trying to do what exactly – I am just another BP user, not a wp / bp dev / guru by any means.
In reply to: Content Invisible to Google@baldarab – well you can add some more original text to each of the “groups” and get some “Above the fold” – that may help a bit,
some other problems..your sitemaps (http://www.freakyrivet.com/sitemap_index.xml ) (created by yoast) – are not showing any of your “activities / groups” – however if you create a sitemap with a tool like: https://www.xml-sitemaps.com/download/freakyrivet.15149203/sitemap.html?view=1
It does show your groups pages in the sitemap created by an actual spider – so add this to another fail with BP and yoast not playing well. I am guessing same for members page since those are “pseudo pages”.
Looking at how another sitemap maker sees your pages, it obvious that you should add some code to get original page titles and meta descriptions. You have about 70 or so pages with the same page title and description.
I just tested that code from wpmudev that I posted above with a newer BP install / updated version and it is working for me. SO you could give that a go – although you will likely have to edit the code and change the name of the profile fields to match your site profile fields (for the code to pull and create info on the member’s pages)
So – your pages are a bit thin on original content, especially above the fold, you have no or duplicate page titles and meta descriptions – and your site is instructing google and others that those pages are not important as they are not in your published sitemap.
I would tell yoast to not make your sitemap and just upload your own.
I would also – not sure why your yoast settings are having it makes mpas for categories and tags – I normally put settings to noindex nofollow all tags and category pages and author pages.. well that’s a lot of free advice – anyhow – hope that info makes sense / helps..
In reply to: Brute force and Four-oh-four Attacks@modx – if you install wP at all thousands of zombie computers that are being used as part of multiple botnets will try to constantly log into your system.
It never hurts to do a clean install though, go for it.
Certinaly there is a chance that they have already gotten your database credentials, so remaking your database usernmae / pass and changing your salt is a good thing to do if you are concerned they may have gotten into your stuff in the past.
I can tell you that in the future if you want a really clean install, first thing you do when you put up a new wp is to add a robots txt that tells all spiders (including google) to not index things like “*p-admin*, *login* *register* – etc – this will help keep it down a bit.. of course ther really evil ones are going to get your login page url.. so starting off a fresh install on a fresh domain with a plugin that moves / renames your login.php would help… but all the evil bots have already indexed your site and put your registration and login urls into their list of things to attack.. so it is what it is.
You can make the lock stronger in several ways, but I don’t think you will stop them from trying to get in,
I’ve blocked countries, large blocks of IP allocations, entire ASNs.. I’ve cut down the amount of attacks – but they still find ways to keep on trying with different methods.
OF course if you can take their password guessing down from 10,000 a day to less than 100 – well the math is in your favor.
In reply to: Group Restriction Pages/posts@xxcoincoinxx – take a look at the “press permit core” plugin in the wp-repo and or maybe the s2member plugin – these may be overkill but may do what ya need – there should be a few similar ones around that can restrict access to static pages well… just don’t cross your fingers to prevent access to bp psuedo pages like members, profiles, groups – that a whole different issue.
In reply to: Brute force and Four-oh-four Attacks@modx – for the moment, I would put your htaccess back to the way it was before – from what I am seeing; you are talking about login brute force password cracking being your big issue.
Although I still suggest blocking those other engine bots – you can probably do that just fine with a robots.txt file at the moment.
IF you are using a login security plugin already – you should be fine… many like to use “limit login attempts” – I use that on some sites – just change the default settings to be more strict than the 4 / attempts.. might also want to add the “whitelist limit login attempts” to keep yourself from getting locked out.
I think succuri is an excellent one too – but there are many others… these login attempt blockers will prevent a bunch of the bot attempts to break it.. recently I have found that adding the plugin “ip geo block” ( https://wordpress.org/plugins/ip-geo-block/ ) is very helpful. Again change the default settings so it also blocks access to your plugins folder and others..
Thing is, every single one of our wordpress (And therefor also buddypress) sites are getting these non-stop password attacks all day, every day. You can try things like add a “captcha” to your login form to make it harder.. but they will keep trying and tieing up your server resources..
Strange to see from your posts that all of those attacks are coming from USA based proxy servers – usually most the attacks come from Ukraine, makes me think they already got into your site once before and are willing to spend a little extra to try to re-attack.
Since those companies are us based you could write them with abuse complaints, but I don’t think you will ever stop the hacking attempts so long as you have a CMS that allows an admin login.
If you are dumping buddypress for the moment and don’t need others to get through a login prompt, I suggest adding this bit of htaccess pwd magic –
http://support.hostgator.com/articles/specialized-help/technical/wordpress/wordpress-login-brute-force-attackSaves me servers a ton of sql requests 😉
In reply to: Where is the Profile Page?@scotty_417 – profile pages, member pages, groups pages – these are not “real pages” – they do not have a “taxonomy” – they are “pseudo pages” – basically add widget stuff your default sidebar and pray it shows up there. It’s a major downside of the current BP, and causes problems not just for easy customization, but also things like page titles and meta descriptions.
Those in the BP forums will likely just point you to your them developer and tell you to ask them. Of course there is no easy answer if they don’t know all the ins and out of BP. Just like the meta problems – point the finger at others, the point back saying they follow the WP guidelines (which for many things have changed recently, making it more difficult for theme designers and BP coders)
No one here is going to help you with a premium theme from somewhere else – at least from what I have seen. You might get a reply if you are asking about the default 2014 theme or something else similar / default WP.
OF course I am not a BP Dev – just another user, so take these thoughts with a grain of salt or two.
In reply to: Brute force and Four-oh-four AttacksOh here is my unanswered question with my concerns about how WP handles some of these things – if the info there helps you at all -> https://wordpress.org/support/topic/question-mark-url-return-200-not-404-string-query-noindex-or
In reply to: Brute force and Four-oh-four Attacks@modx – I have had a similar thing, but not sure exactly what you are describing in your situation, and your screen shot did not show up.
I suggest downloading a copy of your “raw access logs” – first and foremost.
You may have a situation like I ran into where you need to add a robots.txt to block the baiidu spider (all several of them) – and the sogu spider.. also the majestic spider and the hrefs ones.. you may also want to add a few allow/deny directives in your htaccess to block some ip addy blocks..
Again I am not sure if your exact situation, but I ran into something like this recently, and it led me to an unanswered support post at the wp forums – and I found the best way to patch the problem was these things, although I still think more could be done with some advanced htaccess blocking rules using regex – which I am not overly proficient with yet.
In reply to: Creating Lessons Within Buddy PressMight also be relevant – http://premium.wpmudev.org/blog/membership-2-coursepress-pro/
In reply to: Restrict URL and Images For Non Members@gurselgunacar – depends on what urls and attachments you are trying to protect. If you are talking about WP urls and attachments there are many options – things like “press permit core” – maybe s2member (and many others that are similar)..
If you are talking about the BP created psuedo urls, like member pages and groups – that is going to be more difficult from what I gather. There was some discussion about this here: https://buddypress.org/support/topic/bp-member-pages-visibility-restriction/#post-241840 recently.
If you are talking about attachments like with rtmedia uploads – that’s a whole ‘nother ball of wax.
In reply to: BP member pages visibility restriction?searching the wp-repo fro something else – and found this – https://wordpress.org/plugins/members-page-only-for-logged-in-users/
not sure if it works with current versions of things – may work – or may be helpful in finding the right code for whatever.
I think any system for preventing member view (or other page / pseudo page views) should have an optional setting to send a 403 access denied server code – may help with some things.
/random thoughts
In reply to: BP member pages visibility restriction?@pinkishhue – interesting code – I hope it works!
I’d love to see an exta if then statement for the header where someone in this situation could have a:
meta name ‘robots’ “noindex, nofollow” added – if on a “members” page – this would help fix the OPs problem even more / better.
In reply to: Hiding activity when not logged in.Someone recently posted some code that gets into this a bit when it comes to member profiles – https://buddypress.org/support/topic/bp-member-pages-visibility-restriction/#post-241840
not sure if it works, obviously if it does it would need to be adapted for your activity page instead of members..
There have been a lot of QnA regarding privacy settings with bp pages / partial components the past so many months – maybe that is something that will make it into a future version.
There could be other answers to this currently. I am not a bp dev, just another user with limited understanding of how it ticks.
In reply to: [Resolved] Can’t create new groupDid you set “pretty permalinks” ? – Did it actually write the code to your htaccess file?
Some server settings will not let WP write the htaccess file when you change permalinks and you need to create that manually.
What theme are you using?
In reply to: My site users are finding it difficult to login@hammed4real101 – what (list all) plugins are you using?
are they having trouble when trying to login on your actual login page? (.com/login/
– or just when they try to login with the sidebar login widget?recent mentions of facebook integrations stuff here: https://buddypress.org/support/topic/wrong/
In reply to: [Resolved] Videos from Posts in Activity StreamFrom my limited information / understanding (as user not a dev)
“peeps that create BP” – abandoned the project long ago.The forums here and the bp site are mostly ignored and have many problems.
There is no funding for BP anymore – and has not been for a long time.
With that being said – I was amazed to see some really awesome peeps doing a lot of work and smart discussions about so many code issues when recently visiting the bp trac system – so there is a lot going on behind the scenes. All those guys deserve a big bonus, but I am not sure if anyone is getting paid from Auttomattic for working on bp anymore.
There are several people who are monetizing a bit with paid plugins and “bp jobs”, I understand the need to get paid, and I get that there are only so many (maybe a dozen?) – Bp dev people, so providing free support in the forums here is not top of the priority list – and really many of the forums questions are not so much tech issues, but “how to” and “can I..” – which would be more easily answered by a quick bing search..
Anyhow I wish I knew more about how the activity thing chose what to pull in, and how to mod it- there are some neat newish things that BP has added to help filter the activity thing, once in a while someone will chime in with how to do it – but I have not seen any real documentation on it – another job that should be filled, yet will likely not be the top of the unpaid priority list anytime soon.
I wish wordpress would pull BP from showing up as one of the top plugins in the wp-repo and the wp dashboard- I think it is getting too many people to install it or check it out that have not business jumping into this rabbit hole, or asking about it! – lol
Let me know if any of that works our for ya, or if you find the magic “this is what bp pulls” – I am working on a plugin that converts gifs to html5 video for one of my sites, and as to where I don’t mind if those are pulled into the activity – it would be a mess if they all auto-played – so may need to do some work arounds to keep something else there in their place and a “click to see post” kind of thing like were originally talking about.
In reply to: BLOGS@fridafric and now the multi-network “blogs” are called “sites” – which I think is stupid – but be aware when learning how to enable wordpress “multi-site” which was for a long time “wpmu” – that a “multi-blog network” is now “multi-site” network – and your users are asked if they want to create a new “site” – instead of being told they can create their own “blog” – meh.,
@rollercoasterider – congrats – sounds like you have a working wp/bp in a sub folder!
weird how fresh folders and installs clear things sometimes. good to have the practice in case you ever need to restore from backups, change hosts, or deal with a hack infection.
Good luck!
In reply to: Buddypress for a Directory site@wealthy – I don’t think you need buddypress for this. I believe you could easily achieve those goals setting up and wordpress install, turn on multi-site (aka wordpress mu setting) – add in one of the many membership type plugins like s2member.. then add in a commerce plugin like marketpress or woo-commerce, something like that.
Make it so all sub “blogs” aka “sites” are locked out from visibility unless logged in, your “logged in state” is determined by the s2member or similar plugin…
might take a look at press permit core for restricting content.. there are others.. but in essence I think there is no need to add buddypress to the mix. Only thing that would do it open up profiles and friends – but then you’d have much more difficulty locking down member profile viewing and groups viewing and stuff like that, which is not so easy to deal with at the moment.
@rollercoasterider – are you still doing this with a default theme like 2014 or something similar?
Have you tried it with ALL plugins disabled except buddypress?(some hosts do include a wp-cahe type plugin, that is enabled by default, that drove me crazy with a similar issue a couple years ago – lol)
In reply to: Paid Membership Pro With Buddy Press@ghar123 – isn’t this exactly what “press permit core” plugin mentioned above does?
Doesn’t s2member plugin mentioned above do that?make it simple and create an htpasswd file and htacess could do that same I guess.
I don’t know how to write php and mess with functions.php someone else may know more about that.
@rollercoasterider – maybe someone can login to your setup and take a look – it should work if you follow my directions (which you have not I guess) – if it’s not working I can’t tell you why, I have no idea what you mean by it’s not working.
If you followed my directions and it didn’t work – interesting – but you did not – so I can’t help you anymore, sorry.
You could of created a page called called blog and got your settings straight and then later deleted the page and changed your settings.
Anyhow I am not a WP / BP expert, just another user who has setup a few of these and I tried what I could to walk you though what I know.
@quinngoldwin – bp profiles already already come with a “friends” tab – which would do essentially what you are describing if the others have a profile in the system and they have accepted as friends. Then everything you are asking is already done with a default install.
If others are not in the system, I guess they could upload a buddypress docs file with a list or something.
