Forum Replies Created
-
In reply to: Social login plugin
You should be able to hook in and create an input form (in a modal for example). If there’s no hook available, you can always submit a request to the plugin author asking for one to be added.
In reply to: Social login pluginMy advice is to choose one that is actively maintained. Reason being, Twitter et al have been known to make changes to their APIs in the past which could result in some social login plugins no longer working. A developer that actively maintains their plugin should be able to release fixes if this scenario happens.
In reply to: Can’t view private messagesThis is a theme-related problem. You should a) use a BuddyPress compatible theme or b) contact the theme author asking them to release a fix.
In reply to: PDF FunctionalityThis doesn’t answer your question but you say you’re including a file to open a mysql connection. Interacting with the WordPress database should be done though the wpdb class. Check it out, it’ll make your life easier and ensure your code is secure.
In reply to: Create Cover Photos using the new BP_Attachment APIMost likely there are things in the pipeline but we haven’t seen them come into fruition yet. The new API was introduced at the beginning of June so hopefully we should start to see plugins appear over the next few months.
In reply to: how to change forum roles programmaticallyTry asking this over at the bbPress support forums.
In reply to: Cannot Using Other Registration form PluginTry deactivating all plugins (aside from BuddyPress) and activate the TwentyFifteen theme. Do you still see the problem?
In reply to: PDF FunctionalityWhere do I “require(‘../fpdf/fpdf.php’);” and where in loop to call from?
You could place this at the top of your template file. So if you’re using the BuddyPress template hierarchy, that would be your members/index.php template. Be sure to adjust the path, unless of course you have the class stored in the parent directory.
In reply to: PDF FunctionalityHi @mnctigah
You should provide details of what exactly you need help with. Choosing a library? Using the library? Troubleshooting the library?
In reply to: User profiles visibilityYes, I’ve seen many solutions that do just that. Try searching the Plugin Directory. If you have no luck, try searching these forums for a custom code snippet that’ll do the job for you.
In reply to: Search on group members page does not workWhen I click on your link, I get redirected to your home page. Then, on the home page if I try using the search, I get a list of search results as you’d expect.
background-color: #333;You should use Chrome or FireFox dev tools to find the selector you need if @danbp’s selector didn’t work for you.
In reply to: SEO issuesi edited the source code my self and added <form action=”#” which should sort the problem but by doing that everytime there is an update i will need to redo it myself
Yeah, that’s not recommended because, as you say, you will need to redo after each BuddyPress update.
In reply to: SEO issuesThe W3C validator is saying you can’t have an empty form action attribute. So instead of:
<form action=""you will need to provide a value like this:
<form action="some-script.php"You could open a ticket on Trac or alternatively you could solve the problem by providing a value yourself. Check out the BuddyPress Template Hierarchy article for details on how to override templates.
In reply to: Limit the stream activityYes. You can use
bp_parse_args()for that. See the Using bp_parse_args() to filter BuddyPress template loops article for more info.In reply to: Why is there no ajax on profile tabs?I can view anyones messages when logged out.
And you’re definitely talking about what BuddyPress refers to as private messages?
Can you try again after disabling all plugins, reverting to TwentyFifteen and removing all custom code? If you still get to see private messages when logged out then that shouldn’t be happening.
In reply to: Why is there no ajax on profile tabs?With standard buddypress (no modifications) you can freely view anyone’s messages without even logging in
That shouldn’t be the case for all users. Only users with admin capabilities should be able to do that. Are you able to see people’s private messages when logged in as a subscriber? If so, that’s a bug
In reply to: Why is there no ajax on profile tabs?Also, to answer your question:
How would you do the security check?
These must be done server side. You’re right to think that anything done via the client can be tainted (manipulated by an end user).
The general process is:
- Make an AJAX call passing any client-side data to the server
- Process the data (secure it and perform necessary privacy checks) and then send a response
- Do something client-side with that response
For more info on AJAX and WordPress, check out the AJAX in Plugins article.
In reply to: Why is there no ajax on profile tabs?You could see hidden data that user did not want displayed.
That’s why I said privacy checks should be carried out separately.
As an aside, security and privacy are both very different things. Securing data means making sure it is safe where as privacy refers to the visibility of the data. Both these things should be addressed in your application. Then there are nonces, which are different again.
My point about nonces not being necessary in this instance still stands (But I’m sure there will be some who challenge this view). Nonces simply verify intent (i.e. did the user intend to click on this link?).
If privacy and security checks are already in place, then the tab content will be inaccessible to unauthorised users regardless of whether nonces are in operation.
In reply to: Why is there no ajax on profile tabs?Just to be clear, security and privacy checks should be carried out separately to WP nonce implementation
In reply to: Why is there no ajax on profile tabs?@codemonkeybanana this is just my own personal opinion but implementing WP nonces when loading tabs isn’t hugely necessary. WP nonces verify user intent, and even if intent cannot be verified, what harm could come from a visit to a simple profile tab?
In reply to: Target only profile pageWhat are you using for your default landing tab?
As an example, let’s say you’re using activity (which is the default tab anyway) so no need to do the following:
define( 'BP_DEFAULT_COMPONENT', 'activity' );Now, your example.com/members/username screen can be targeted like this:
if ( bp_is_user_activity() ) { // Do something. }Note:
bp_is_user_activity()will also target activity sub-screens so if you want to exclude these you’ll need to modify your condition slightly.Instead of
groups_accept_invite(), try usinggroups_join_group().So in your code above, you’d use:
groups_join_group( $group_id, $bp_user_id )In reply to: availability plugin buddypressRendez Vous is the closest thing I know of. Feel free to search the Plugin Directory to see if anything else is available.
Which theme are you using?
