[@wpsec Participant 16 years, 6 months ago]

Hey, just a reminder here that not everyone uses the BP groups feature. So your plugin breaks if it’s disabled. You need to at least modify buddypress-link.php (0.4.1) at around line 162 to something like this:

if (class_exists('BP_Group_Extension')) {

require_once 'bp-links-groupext.php';

}

Note that I didn’t check the entire plugin for other possible breakage points. So you might want to do that.

[@wpsec Participant 16 years, 7 months ago]

Last time I looked at how Gravatar works, it was like this: A URL is built with a parameter tacked on. The parameter is a ‘hash’ of the user’s email address. That URL is embedded into an <img src…> tag.

When someone’s browser tries to render the image Gravatar is contacted. Gravatar then checks to see if the email address has an avatar (stored at Gravatar) associated with it. If it does it returns that avatar and if not it returns a default image instead.

So in either case a browser waits on Gravatar to dump out an image file.

[@wpsec Participant 16 years, 7 months ago]

@mrjarbenne – Good point.

To set a default privacy level that ensures no one inadvertently exposes info, open the file simple-buddypress-privacy.php using a basic plain text editor like Notepad on Windows (do not use Microsoft Word to edit code). Find this line near the top somewhere:

define( ‘CPT_BP_XPROFILE_PRIVACY_FIELD_DEF_VALUE’, ‘3’ );

Change the number 3 to 0 (zero). Save the file, then upload the plugin and activate it. By changing 3 to 0 the plugin will default to making all profile fields invisible to everyone except the profile owner. Then students can edit their profile and intentionally choose which fields to expose.

That’s the quick fix for your particular situation.

Of course that still doesn’t allow you to force any permanent settings since students ultimately get control. But I see your point – I just don’t agree with it entirely even in the case of elementary school students.

As a parent, I advocate teaching along with careful monitoring – the two go hand in hand. Of course being taught involves the student making mistakes – granted. So, if you really want to ensure that no student exposes sensitive information then consider not providing a mechanism for such information to be put into a Web site – particularly since unless you put those computers in a vault at night then you have no idea who is really accessing that information nor when it is accessed. For example, what if your school is burglarized and the computer(s) stolen? Or if your site is not hosted in the school itself, then you have no total control whatsoever over what happens to the information in the site.

[@wpsec Participant 16 years, 7 months ago]

@Andy Peatling — ’tis done

[@wpsec Participant 16 years, 7 months ago]

@pedromiguel: Not sure what you mean by “ver 0.1 to 0.2?” — what exact plugins are you referring to?

[@wpsec Participant 16 years, 7 months ago]

@Erich73 – I figure that it will be eventually. It’s very easy to add.

[@wpsec Participant 16 years, 7 months ago]

@r-a-y: Didn’t see that one, and after hunting around for a while I decided to stop hunting and make one work. I read and write code pretty fast so for me making one work is faster than hunting in this case.

Anyway, the one I released allows for only showing info to logged in users. The plugin you linked doesn’t do that. Plus I don’t see any reason not to give the user total control over their profile since it’s their info (thus no need for a setting to “Let user decide” )

Also, the one you linked has controls in the admin panel that govern a user’s profile. So if you want to let a user control their own settings you have to set every profile field to “Let User Decide” which is fine, until you add new profile fields and forget to go back and make that adjustment for the new fields.

I like the no maintenance route of just automatically letting the user take total control of their info.

Thanks for the link though.

And for clarity’s sake, I didn’t write the original code. I simply modified it to work with BP 1.2 and added a few features.

As for UI, there’s no need for an admin interface so none exists. To handle display of the field controls you have to modify CSS to work with your particular template unless it works out of the box Ok for you. Same as any plugin that puts content on a site.

[@wpsec Participant 16 years, 7 months ago]

@Xevo: Far as I know, as of today, Jeff Sayre’s doesn’t work with BP 1.2

[@wpsec Participant 16 years, 7 months ago]

Looks like a couple of you downloaded the plugin within minutes after I made the original post here.

You might want to go back and get a new copy. The plugin is now at v1.1 and we’ve just added a new setting that lets users make an item in their profile viewable to all logged in users. So the 4 possible settings for each profile field, which control who can view the data, are as follows:

– Everyone (meaning even people who are not logged in)

– Everyone logged in

– Only my friends

– Just me

There ya go. Enjoy the goodies, and don’t forget to tip your developer

[@wpsec Participant 16 years, 9 months ago]

What I wrote about here was mainly for people working with BP 1.2. But in either case (1.2 or 1.1x) if you want what you see at bp.org/forums then you will need template files to display your forums within your site’s BP theme.

[@wpsec Participant 16 years, 9 months ago]

Just copy the form code itself out of that file, get rid of the PHP related stuff so that all you have it pure HTML, then paste that code into a page. If you can’t get it to work then obviously you’d need to get a PHP / BP developer to handle it for you.

[@wpsec Participant 16 years, 9 months ago]

With a std install of BP 1.2 you don’t have the ability to activate bbPress plugins, create forums independent of groups, etc. As of this date BP 1.2 only offers limited bbPress functionality from within BP. If you want more functionality you have to copy bb-config.php per the post at the URL below and then access the bbpress at http[yoursite]/wp-content/plugins/buddypress/bp-forums/bbpress

https://buddypress.org/forums/topic/bp-12-and-bbpress-adminplugins#post-34150

If you want to separate non-group forums from group forums so that people don’t see group forums when viewing a list of forums (as seen in a typical standalone install of bbPress) then one way to do that is to do a second install of bbpress. Easiest way is to install BP 1.2, activate the forums in the admin panel, then go copy the /wp-content/plugins/buddypress/bp-forums/bbpress directory to a new location within your site – and be sure to also copy bb-config.php from the bp-forums directory and then edit the file so that it has the correct settings. That’s a simplified explanation, meaning there’s a bit more to it and you need to at least be semi-familiar with installing and administering bbpress software. For example, you probably should have the second copy of bbPress use its own db tables, etc.

[@wpsec Participant 16 years, 9 months ago]

SMS depends upon being able to get a message into the right network – not entirely easy to given the wide array of different cell phone carriers. Not impossible, but certainly not easy.

Voice chat – for a cross-platform solution – would most likely have to be done with Flash.

There are already solutions out there than be integrated into your site if you want to buy one.

[@wpsec Participant 16 years, 9 months ago]

An alternative way of accessing the admin panel – WARNING – this could be a big security problem is left in place, depending on your setup:

— copy your bb-config.php file from your WPMU root dir into the /wp-content/plugins/buddypress/bp-forums/bbpress directory.

— load up the bbPress admin panel in a browser and do what you need done (activate plugins, etc)

— DELETE the bb-config.php file in your /wp-content/plugins/buddypress/bp-forums/bbpress directory because if you don’t then someone could access the forum directly.

[@wpsec Participant 16 years, 9 months ago]

I figured out how to handle this situation – assuming that someone is using the integrated bbPress plugin and not an external install. Here’s what you do to get access to the admin panel in bbPress:

— download and unzip a copy of bbpress onto your site somewhere in a hidden location.

— copy the bb-config.php file from your WPMU root directory into your hidden bbPress installation

— edit the bb-config.php file so that the $bb->uri variable points to the right location for your hidden bbPress installation.

Open the hidden directory in a browser and login with your admin account. That’s all there is to it. With that done you can access the admin interface.

Be careful not to mess anything up I can’t be responsible if something goes wrong on your site!

[@wpsec Participant 16 years, 9 months ago]

got a thread link ?

[@wpsec Participant 16 years, 9 months ago]

@Peterverkooijen: Wrap the class in a function, be sure to declare the class as a global inside the function. Then add action for ‘bp_init’ that loads the class and registers the group extension. Here’s how I did it:

function build_twitter_ext() {

global $BP_Group_Twitter;

class BP_Group_Twitter extends BP_Group_Extension {

[snip…….]

}

}

then below that add this:

add_action(‘bp_init’,’build_twitter_ext’);

add_action(‘bp_init’,’load_twitter_ext’);

function load_twitter_ext() {

bp_register_group_extension( ‘BP_Group_Twitter’ );

}

That should work for you.

[@wpsec Participant 16 years, 9 months ago]

Peterverkooijen wrote:

> Could M’s solution fix this plugin? Has anyone applied that yet?

Basically, but not quite in the same way.

Look at that plugin code. You see that it tries to build a class (BP_Group_Twitter) that extends another class (BP_Group_Extension) – but BP_Group_Extension isn’t loaded yet. So that’s the problem, and what needs to happen is to delay building BP_Group_Twitter until BP_Group_Extension is loaded.

[@wpsec Participant 16 years, 9 months ago]

simple solution for plugin devs:

Write your plugins as a class, then add an action to instantiate the class upon bp_init.

Sort of like this :

class myclass {

[whatever code]

}

add_action(‘bp_init’, ‘fire_my_stuff’);

function fire_mystuff() {

$my_plugin_class = new myclass();

}

That’s it.

[@wpsec Participant 16 years, 9 months ago]

All I need is reasonable WP 3.0 *ALPHA* code and good BP 1.2 code. That’s it.

We aren’t there yet.

Not knocking the code, just sayin’… it’s needs a little more work.

[@wpsec Participant 16 years, 9 months ago]

Here’s the scoop. First of all, BP 1.2 is gonna break a lot of plugin code based on what I’ve seen to date. So I’m not really in a rush to finish BP Chat or BP Twitter until two essential things happen:

1. The upcoming WordPress 3.0 (due in March 2010) is in a reasonable state of Alpha release so that the code base merge of WP and WPMU is good enough for cross-platform developers to actually get busy with modifying their own plugins to work properly.

2. BuddyPress 1.2 gets close to final beta.

When those 2 things happen I will finish both plugins. But that isn’t happening yet. WP devs have only just released a basic WP/WPMU merge over the weekend (Jan 18). I have it installed. I can’t work with it to develop stuff for BP. Too much is still missing. As for BP, 1.2 is coming along. I also have that installed, but there are some bugs that create significant hurdles.

That said, my BP Twitter plugin is essentially done, but some of the code is gonna break in BP 1.2, so I’ll have to fix it before it’s released. BP Chat is basically done in terms of one-to-one chat too, but again, I’m waiting for items 1 and 2 above before I release it because I will definitely have to change the code to work right.

Group chat is gonna have to wait a bit longer. Some of you have had a chance to demo group my chat. It’s cool stuff, it works, but it needs more work, and there’s no sense working to finish it when I know full well that I’ll have to mod the code significantly to work in BP 1.2.

Hang tight folks. I know it’s been a while, but I will release some stuff as soon as technically possible.

And if you’re overly impatient or have mission critical immediate needs, go with something that is already out there, or hire a pro to build you a solution

[@wpsec Participant 16 years, 11 months ago]

Quoting Gpo1: “@M, Please can you extend your twitter plugin with a page for user’s followers tweets & avatar? ”

@Gpo1: I probably could, but the plugin is not meant to entirely replace Twitter, it’s meant to offer a reasonable amount of interactivity with Twitter.

[@wpsec Participant 16 years, 11 months ago]

Funny how bills can take a person away from writing free code

Sorry for the delays…

Basic chat works. Group chat is more complicated if one wants to really support anything other than a tiny community without driving a database server into the group with loads of queries per second. So we’re working on that and having some success. I guess a few of you had a chance to demo that aspect while I was online testing it

No ETA on a release date…

[@wpsec Participant 16 years, 11 months ago]

Funny how bills can take a person away from writing free code

Sorry for the delays…

[@wpsec Participant 17 years, 4 months ago]

@el_terko: Thanks – If Andy’s fix in the thread you posted works then my site is fixed. I don’t use FF 3.5 yet, so I can’t test it myself.