Re: user_nicename in messaging
I didn’t mess with the core at all. All I did was change the user_nicename. BP is using the user_nicename next to the ‘Display as’ name with an @ in front to indicate you can message to it. You can’t. You can only message to the username you login with, as you quite rightly state. Either BP should use the user login or the User_nicename – not both. Knowing who an admin is isn’t that hard you just need to look at the messages – or if you have time you could try them all. the point is that pne of the first recommendations from WordPress, if you are trying to secure your site, is to change the admin login – well if you use BP there’s no point is there – it’s open to anyone to see!