BuddyPress.org

BuddyPress would need some core changes to make privacy work on things like individual activity items. You can get some type of privacy by blocking pages. BuddySuite has a few options for users to block certain profile pages to friends only.

https://github.com/modemlooper/BuddySuite

You still need to use a maxlength on input for the user. If you want to block a bypass then you can filter

http://etivite.com/api-hooks/buddypress/trigger/apply_filters/xprofile_data_value_before_save/

all a nonce does is send a parameter in the POST and then on the back end it verifies the value. There isn’t much that would cause an error. Where and what is the error?

If you don’t want to edit core files then create the same files in your theme folder with the same folder structure and those files will override BP.

copy file from:

buddypress/bp-templates/bp-legacy/buddypress/members/single/profile/edit.php

to:

your-theme-folder/buddypress/members/single/profile/edit.php

open file edit.php in buddypress/bp-templates/bp-legacy/buddypress/members/single/profile/edit.php

find:

<?php if ( ‘textbox’ == bp_get_the_profile_field_type() ) : ?>

<label for=”<?php bp_the_profile_field_input_name(); ?>”><?php bp_the_profile_field_name(); ?> <?php if ( bp_get_the_profile_field_is_required() ) : ?><?php _e( ‘(requi…[Read more]

A form only needs one nonce, are you trying to add all these to one form?

Those two plugins are the only known facebook integration plugins. Facebook does not allow you to pull content from it’s site. You can only post to Facebook

HashBuddy or the outdated plugin?

if you dont have header-buddypress.php file then it falls back to the default header.php

https://gist.github.com/modemlooper/5416410

bp_is_profile is used to test if its a profile page. try that in a conditional.

Avatar specific settings can be changed:
define ( ‘BP_AVATAR_THUMB_WIDTH’, 50 );
define ( ‘BP_AVATAR_THUMB_HEIGHT’, 50 );
define ( ‘BP_AVATAR_FULL_WIDTH’, 150 );
define ( ‘BP_AVATAR_FULL_HEIGHT’, 150 );
define ( ‘BP_AVATAR_ORIGINAL_MAX_WIDTH’, 640 );
define ( ‘BP_AVATAR_ORIGINAL_MAX_FILESIZE’, $max_in_kb );
define ( ‘BP_AVATAR_DEFAULT’, $img_url…[Read more]

In that plugin does it have an admin option you enter for specific extensions? Also, it’s a bit dangerous to allow everything accept a few file types. Could open up a security flaw.

or use pathinfo() to get extension

shouldn’t you check type at the upload point? This is an example not tested

$array = array( one, two, three );
$type = $_FILES[‘upload_file’][‘type’];

if ( in_array( $type, $array ) ) return false;

browser cookie is saved when you select and then if cookie exists BP displays that content

LOL auto correct in osx grrr!

You can still get plugins after a donation http://shop.taptappress.com

like I said all that header info breaks page when you try to do a redirect before page load. You can always do a javascript redirect but that is after page load and not any faster than using one of the plugins. You maybe able to remove the header comment text.