[@hnla Participant 14 years, 7 months ago]

It’s hard to say what the issue is here or whether a re-install of BP would effect any change – I wouldn’t have thought so but then probably wouldn’t hurt to?.

What’s the site address?

You may well need to employ someone for a couple of hours to track down this issue.

[@hnla Participant 14 years, 7 months ago]

Why did you not simply upgrade the present installation to latest WP then after upgrade BP, probably safest as incremental version updates rather than jump to 1.5 when it sounds as though you might have been on a pretty old version even a 1.1 stream.

It may be the case that the present new version of BP needs to run it’s DB upgrade script, if it still can, not sure of the consequences if you install and set up 1.5 then import old db tables.

[@hnla Participant 14 years, 8 months ago]

‘Admin changed’ that should have really caused instant alarm bells my friend, you need to immediately change all your account/hosting access , FTP, DB, passwords and WP user passwords, then start looking for the exploit point if it exists.

The form filling isn’t due to hacking as aces pointed out it’s discussed and I have also had discussions with other developers who run into this issue – not sure but feel it’s WP/BP not doing something properly here as it should not hold data from process / connection and pass it back to a completely different connection. But as Modemlooper says I haven’t been able to replicate this or run across it personally.

[@hnla Participant 14 years, 8 months ago]

Very little information to go on, no bugs as far as I’m aware but then what version of anything are you running?

Standard response here is all that can be given at this stage. Please disable all third party plugins leaving BP only and revert to bp-default theme if using a custom theme, and then check if issue still appears.

[@hnla Participant 14 years, 8 months ago]

and…

[@hnla Participant 14 years, 8 months ago]

How were they sent then?
To be honest this question you pose is more to do with you perhaps first having an understanding of protocols and how they work and what part applications that run on servers have in that process.

I’m not trying to put you off the discussion, but this is not really an issue with buddypress unless you can come to us with some explanation of how in your tests you have arrived at the possible conclusion that bp is not secure in some fundamental way.

[@hnla Participant 14 years, 8 months ago]

Should that not have been ‘BP not secure?’ rather than ‘BP not secure!’ question rather than a statement!

BP doesn’t implement https the server does, for https to be secure valid and authentic certs must be in use?

The point of correctly implemented https with certs and encryption layers is to prevent ‘ man in the middle’ interceptions.

[@hnla Participant 14 years, 8 months ago]

They are for user blogs.

Blogs for each user are a feature available if you have enabled your WP install for Multisite use i.e subdomain or subfolder separate WP blogs running under your primary WP domain install. See the WP codex for a better detailed explanation to setting up Multisite.

[@hnla Participant 14 years, 8 months ago]

Your PHP script memory limit may be too low, if you have access to php.ini see what value is set for memory limit and if around 32mb try upping it to around 96mb or even 128mb, or check the bp codex for other means of changing the value through wp-config.

[@hnla Participant 14 years, 8 months ago]

afraid it would probably take a fair bit more work than just moving template files in, why would you want people commenting on others profiles though, personally I would have though most users would not want this happening.

[@hnla Participant 14 years, 8 months ago]

buddypress/bp-members/bp-members-buddybar.php

But try and avoid editing a core file directly.

[@hnla Participant 14 years, 8 months ago]

Boone is a core developer of BP and posts on this BP support forum, can you post a link to the stackoverflow post for completeness and for others if they happen across this thread looking for same help.

I didn’t and still don’t really get you requirement here or why the include function and not get_sidebar or template_parts but yes is_page() works on components and, as I clearly missed the point, if you just wanted to target actual profile screen then either of what you had or have should work.

Glad it’s sorted though

[@hnla Participant 14 years, 8 months ago]

You seem to be approaching things from to different angles first post you suggest you are working in sidebar.php adding conditional blocks, my approach above would work to create a block that would only appear in sidebar.php if you were on /in a user account set of screens in that block you could set a new widget region if you wanted to add widgets from dashboard.

I’m not sure what your approach above is in using those include statements – they’re not really the preferred method in WP, if you want to simply have a different sidebar for account screens why not simply create new file and replace the get_sidebar call with a named one get_sidebar(‘account’) in /members/single/home.php

[@hnla Participant 14 years, 8 months ago]

> Apache rewrite module not enebled

You’ll need it enabled.

and if issue persists and you have plenty of PHP script memory you will need to look at your server logs as mentioned earlier to pinpoint the issue.

[@hnla Participant 14 years, 8 months ago]

Closing topic as this is the third posting on the subject. Please stick to the thread I replied to on this issue.

[@hnla Participant 14 years, 8 months ago]

Oh and please don’t write in caps, it’s not necessary and does not get you any quicker attention. Writing in all caps is considered shouting and impolite

[@hnla Participant 14 years, 8 months ago]

> Perhaps it’s a plugin I’m using?

Perhaps it is?

Supplying little or no information just means all we can do is guess at the cause and throw up possible things to look at give us detail and we may be able to offer a little more serious help.

This is a second post you have started on the same subject, please don’t start multiple topics, keep to the same one and ‘bump’ if and when necessary.

I have replied to your other thread so I’m closing this one.

[@hnla Participant 14 years, 8 months ago]

Your user account: under ‘profile’ there should be a link that says ‘change avatar’ !

[@hnla Participant 14 years, 8 months ago]

It helps if you try and supply a little detail to your post, what setup have you got , versions etc, what have you tried thus far i.e have you followed all the steps to set up these aspects in the BP settings. Are you using a custom theme if so have you performed essential basic step of reverting to the bp-default theme with any plugins installed that may conflict disabled and does the issue still exist then when running a basic standard install.

When you say re-install via ftp how did you originally install? Via a one click control panel install? if so then, yes do perform a fresh install, but after checking issue still exists with default setup

[@hnla Participant 14 years, 8 months ago]

profile/account seems to be a difficult one to easily check for.

`bp_current_action()` returns a value for members account screens and for group screens so you could use that with a check for a null or empty string along with a check to see whether you are on a groups page or groups component

[@hnla Participant 14 years, 8 months ago]

That is going to be the issue, pass the problem off to them to solve as it’s essentially a domain configuration problem, once they’re aware of the problem they will know how to correct. While you are working with them you might as well ensure they have set a SPF record for the domain and also PTA records both will help ensure mail servers can satisfy there spam checks and verify the domain and the server as being an authorised one to send mail for that domain.

[@hnla Participant 14 years, 8 months ago]

And have you got pages associated to the main BP components e.g ‘members’, ‘activity’ glancing at the site doesn’t look as though you have.

[@hnla Participant 14 years, 8 months ago]

To ensure you haven’t got an errent plugin at work, disable all non essential plugins to see if things improve, if possible simply run with WP and BP nothing else.

If you are on shared hosting then there may well be nothing you can do as other sites/domains may be dragging the server down, so in that event you may need to contact your host and ask them to investigate.

Until your sure where the problem lies don’t throw plugin solutions at your site, I wouldn’t have thought with your site you have need of caching plugins yet and they can cause issues if you’re not sure how to manage / configure them correctly.

[@hnla Participant 14 years, 8 months ago]

Agreed on the matter of adding a plugin to cure the symptoms, it’s not really a solution; sending email is a fiddly business due to a plethora of badly implemented solutions for trying to ID spam mail, but essentially moving email around is not rocket science and ‘sendmail’ or similar apps work quite well to achieve this, generally this sort of issue will be to do with receiving servers not being happy with the mail, either they can’t perform a reverse lookup on the domain or they are trying to check for a SPF record and not finding one. Not sure what to suggest other than that, your site/server is sending emails successfully so I don’t see the point of a further plugin, reviewing any mailer-deamon failure emails if they exist and can be found can help by tracking down any error numbers returned, but logs are really the only means to working out what is happening here.

Is your mail server located elsewhere for that domain? is the box you are running your site on a cpanel or plesk enabled one? i so does that have a mail server running set to your domain, control panels can tend to set up defaults that are not obvious and run services such as email servers that you may not want and that may be trapping your domain mail and returning it to it’s self rather than pushing it on off the box.

[@hnla Participant 14 years, 8 months ago]

And obviously all those accounts have mail boxes and , receive emails to addresses such as joeblogs@example.com?So is your server hosting BP acknowledged as a server allowed to relay mail from itself under that domain, this sounds more like an issue with your mail server and how it’s been configured – too tightly in respect of spam checking? you may want to check your email logs see what has been arriving at your email server and how it’s dealt with it.