Skip to:
Content
Pages
Categories
Search
Top
Bottom

Search Results for 'toolbar'

Viewing 25 results - 1 through 25 (of 709 total)
  • Author
    Search Results
  • Profile photo of abooster
    abooster
    Participant

    There is a feature in WordPress that’s very useful for a blog owner who administers his/her own blog, but that same feature presented to the user who is NOT a site admin is downright malicious and exposes the site owner to a serious security risk or at least a serious and even more costly privacy risk.
    BuddyPress and bbPress are both guilty of doing just that.

    But the interesting thing is:
    The administrators of BuddyPress.org apparently do have a brain because they’ve made sure that this giant security/privacy hole is closed on this bbPress forum here.

    So, WHY THEN ARE THEY EXPOSING every other normal BuddyPress and bbPress user to that malicious behavior of BuddyPress and bbPress???
    WHY???

    That’s what I wanna know.

    Oh, you wanna know what’s that malicious behavior/security risk that BuddyPress and bbPress is exposing you to?
    Easy!
    Go to your own installation of bbPress, create a new topic/post and while creating it highlight a word and click that “insert link” button you see in the top row!
    Does it ring a bell?

    In case you are very slow, lemme ring the bell for you here:

    First, you need to open your eyes. That’s quite important.
    Listening to the bell alone isn’t gonna help you.

    Secondly, take a look at that “Or link to existing content” thingy and explore the list that appears below!
    See how it lists ALL OF YOUR PAGES including the secret thank-you pages with content that is supposed to be visible ONLY TO PEOPLE WHO HAVE PAID FOR THE PRODUCT!
    As well as all of your test pages and other secret/private pages that you don’t want anyone to have access to.

    And in case you don’t think that’s a good idea, you are not alone.
    The admins of BuddyPress.org don’t think that’s a good idea either.
    That’s why on this website, on this bbPress forum here they have removed that security/privacy threat!

    That’s right! If you try the “insert link” feature in this forum here, you’ll immediately notice that this malicious “Or link to existing content” feature has been disabled.
    It’s not suggesting any of the internal pages on BuddyPress.org here.

    GOOD THINKING!
    And it’s good to know that at least the admins of BuddyPress.org do have a brain.

    Now, in a bbPress forum you could sort of “fix” this issue by making your forum extremely inconvenient for your users.
    Just go to your forum settings and uncheck “Add toolbar & buttons to textareas to help with HTML formatting”.

    But is that something you really want to do???

    Do you really want your forum appear as if was coded in 1997?
    Do you really want to deprive all normal forum users of being able to format their posts?
    And even users who know HTML, would they want to type HTML markup when posting in a forum?

    But hey, while bbPress offers at least a 1997-style kill switch to switch off that malicious behavior of bbPress, BuddyPress does NOT offer such switch at all.

    So, if, for example, you have something like BuddyPress Docs installed (a very helpful plugin by the way), then you’ll find yourself facing the same damn problem!

    Now for my final question to the admins of BuddyPress.org:
    Do you know what negligence is?

    You are guilty of negligence because while having protected your own site with some custom coding, you are exposing all other people using your software to a serious security/privacy risk!

    FIX IT!
    I want people to be able to easily format my forum posts and BuddyPress posts (using TinyMCE) WITHOUT exposing my private pages!
    Otherwise I might just as well publish my admin password on my home page.

    WHY THE HELL is the custom code that you have implemented on this site here (and on WordPress.org to protect your sites from malicious attacks) is not part of the core BuddyPress code???????

    P.S.
    I couldn’t keep this post any shorter because when I see such a tremendous amount of stupidity (or negligence in this case) it just drives me mad.

    #253745
    Profile photo of pcasciaro
    Kash
    Participant

    Thanks for the reply.
    That’s a pity.
    The community or bp menu i think should be available on the entire network and not only on mainsite. Otherwise a blog user will need to go back on the mainsite to use the community tool.
    When you say the toolbar do you mean the dashboard (backend)?
    If so that’s also a pity because users don’t like to go to the backend. Instead it would be better to have the full bp menu on Frontend.
    Paddy

    #253744
    Profile photo of danbp
    danbp
    Moderator

    So the mainsite BP menu is not complete on subsite!

    That’s right, because on a subsite, you’re on a blog.
    BP is only active on the mainsite, as it’s where it is activated. On mainsite you see whole members fonctionnalities (friends, groups, messages and son on). On a blog, aka subsite, you’re like a user of a WP site whithout BP.

    That’s also the reason why enabling multiblog is deactivated by default and not usefull in most of case. This warning is given on the codex page i indicated you previously.

    Deactivate multiblog and revert to initial default configuration.

    On the toolbar, in top left corner, you have the usermenu with all BP items. This menu is accessible to logedin user, wherever he is. Mainsite or subsite. And that’s default behave !

    For a bit more understanding, in case you want insist to remove that menu to get it on the main nav (beside About, Home etc), please take a look to this topic.

    Cheers ! 😉

    #253734
    Profile photo of AngelaQ
    AngelaQ
    Participant

    WordPress version 4.5.2
    Buddypress version 2.5.3

    ColorMag Theme

    When I installed bp and turned extended profiles, if I go to the toolbar in the upper right and choose Profile-Edit it goes to something like this:

    /members/[username]/profile/edit/group/1/

    And it’s a 404 page.

    Also, if I click on any of the users in the backend including me the Admin, it says they’re marked as spam but yet the active/spam toggle is set to active not spam.

    In addition, the register page doesn’t work and just loops back to home page.

    Am I supposed to do some kind of setup other than checking the button the button that I want extended profiles in order to make this work? The documentation on this site for this just says it’s pending.

    I’ve turned it off so I can at least use regular profile management but would love to access the extended profiles capabilities.

    #252541

    In reply to: Blog for users

    Profile photo of FridaFric
    FridaFric
    Participant

    Hi danbp,
    Thank you very much for your prompt response. I’ve done all that you wrote me but new tab called Sites do not appear in Toolbar user menu. Maybe I need something to do in BuddyPress settings too?

    #252540

    In reply to: Blog for users

    Profile photo of danbp
    danbp
    Moderator

    Hi,

    you don’t need a plugin to do that. You have perhaps omited to activate blog creation. Go to your network admin (wp-admin/network/settings.php)

    and select one of these option:
    – Logged in users may register new sites.
    – Both sites and user accounts can be registered.

    Save and you’re done.
    On the Toolbar user menu (top right) you will see a new button called Sites whith a sub-menu Create a site.

    #251764
    Profile photo of Paul Gibbs
    Paul Gibbs
    Keymaster

    By “notification”, do you mean an email? Or a notification in the toolbar? Or both?

    Profile photo of RONO2
    RONO2
    Participant

    Hide Admin Bar Toolbar is what I used. I’m still trying to link my buddypress with my bbpress not going over well. LoL Hope this helps.

    #249911
    Profile photo of OakCreative
    OakCreative
    Participant

    @oliver_rub, our current solution involves deregistering the BuddyPress mentions script and enqueuing our own slightly modified version with a more generic jQuery selector. I think @slaffik has found the best solution though, I’m going to try it.

    @benworxnl, no we had a slightly different scenario. We transformed the “What’s New” textarea into a WYSIWYG editor and the visual tab worked on that straight away. The issue we had was getting the mentions to work on that visual editor.

    Anyway, we duplicated and edited the activity/post-form.php template and replaced the textarea with wp_editor;

    wp_editor(
    	isset( $_GET['r'] ) ? '@' . esc_attr( $_GET['r'] ) : '',
    	'whats-new',
    	array(
    		'textarea_name' => 'whats-new',
    		'editor_class'  => 'whats-new-mce',
    		'editor_height' => 200,
    		'tinymce' => array(
    			'toolbar1' => 'bold,italic,underline,|,blockquote,|,bullist,numlist,|,link,unlink,|,spellchecker,|,undo,redo',
    			'toolbar2' => ''
    		)
    	)
    );

    For activity replies, you could do something similar to this in activity/entry.php;

    wp_editor(
    	isset( $_GET['r'] ) ? '@' . esc_attr( $_GET['r'] ) : '',
    	'ac-input-' . bp_activity_id(),
    	array(
    		'textarea_name' => 'ac_input_' . bp_activity_id(),
    		'editor_class'  => 'ac-input',
    		'editor_height' => 200,
    		'tinymce' => array(
    			'toolbar1' => 'bold,italic,underline,|,blockquote,|,bullist,numlist,|,link,unlink,|,spellchecker,|,undo,redo',
    			'toolbar2' => ''
    		)
    	)
    );

    Please note, I’ve not tested the above.

    #249713

    In reply to: Few Issues

    Profile photo of David Cavins
    David Cavins
    Moderator
    #249666
    Profile photo of johnywhy
    johnywhy
    Participant

    hi!

    We need a plain text multiline field (without formatting toolbar). Like HTML “textarea” element.

    Is there a way to hide the formatting toolbar in the built-in multiline textbox? What kind of textbox is that TinyMCE?

    Or, can we add a new fieldtype? i could not find instructions for this– if possible, plz link me to instructions.

    thx for all help!

    #249663

    Topic: Few Issues

    in forum Your BuddyPress
    Profile photo of angelawilkes
    angelawilkes
    Participant

    I am needing help on a few issues. I have latest WP & BP available as of today, and am using theme Twenty Thirteen. The website is http://www.ogfs.org
    1) When registered users log in, I need them to only have access to the front-end rather than their limited back-end page. (Note: I am using BP Registration Options to require admin approval upon registration).
    2) Disable the toolbar at top for all non-admin users
    3) Recommendation on plugin that allows photos to be posted to group post comments. I have tried a few that allows media into the original post, but not the comments. A secondary alternative is possibly allow media attachment into private message (not ideal, but acceptable)
    4) Ability for users to Edit their comment. Delete works great, but need ability to edit also. Plugin?
    Thanks in advance for any and all assistance!

    #249656

    Topic: Few Issues

    in forum Your BuddyPress
    Profile photo of angelawilkes
    angelawilkes
    Participant

    I am needing help on a few issues. The website is http://www.ogfs.org
    1) When registered users log in, I need them to only have access to the front-end rather than their limited back-end page. (Note: I am using BP Registration Options to require admin approval upon registration).
    2) Disable the toolbar at top for all non-admin users
    3) Recommendation on plugin that allows photos to be posted to group post comments. I have tried a few that allows media into the original post, but not the comments. A secondary alternative is possibly allow media attachment into private message (not ideal, but acceptable)
    4) Ability for users to Edit their comment. Delete works great, but need ability to edit also. Plugin?
    Thanks in advance for any and all assistance!

    #249305
    #248156
    Profile photo of jscmal
    jscmal
    Participant

    @shanebp

    Here the list of plugins installed in this moment:

    advanced-lazy-load
    advanced-recent-posts
    affiliates-manager
    affiliates-manager-simple-membership-integration
    akismet
    bp-activity-autoloader
    bp-activity-comment-notifier
    bp-activity-shortcode
    buddypress
    buddypress-cover-photo
    buddypress-first-letter-avatar
    buddypress-followers
    buddypress-media
    buddypress-members-only
    buddypress-sticker
    cookie-law-info
    ewww-image-optimizer
    eyes-only-user-access-shortcode
    favorites
    fb-like-notification-for-buddypress
    google-analytics-dashboard-for-wp
    hashbuddy
    invite-anyone
    jetpack
    mailchimp-for-wp
    options-importer
    options-optimizer
    redirection
    simple-ajax-chat
    simple-membership
    simple-membership-after-login-redirection
    simple-membership-custom-messages
    simple-membership-form-shortcode
    simple-membership-mailchimp-integration
    simple-membership-menu
    simple-membership-wp-user-import
    stream
    testimonials-by-woothemes
    user-role-editor
    user-switching
    woosidebars
    wordpress-database-reset
    wordpress-importer
    wordpress-seo
    wp-optimize
    wp-postviews
    wp-super-cache
    wp-sweep
    wp-symposium-toolbar
    wp-useronline
    wp-video-lightbox

    #248103
    Profile photo of shanebp
    shanebp
    Moderator

    I made a small adjustment to the code in an attempt to solve the issue you reported on the plugin support forums.
    Can you confirm that it is working?

    Re “removing the toolbar and menu for all users except admin” – please do not double post.
    Please use your existing thread:
    https://buddypress.org/support/topic/disabling-the-toolbar-for-members-except-admin/

    #248102
    Profile photo of debabratsharma
    debabratsharma
    Participant

    i am using this BP Registration Options plugin which does the same work like your plugin i guess….although i m looking now for removing the toolbar and menu for all users except admin…..can you help me on that??

    #248099
    Profile photo of debabratsharma
    debabratsharma
    Participant

    buddpress: 2.4.3
    wp: 4.4

    I want to disable toolbar for members so that it is visible only for admin….

    I also want to disable menu for non-members…I am using BP Registration Options plugin but the menu still is displayed but it cant be accessed by non-members…i am using the register page as front page of the theme…

    #247910
    Profile photo of dlongm01
    dlongm01
    Participant

    OK – I found it:

    /* Buddypress rich text toolbar – hide fullscreen button*/
    .mce-i-fullscreen::before {
    display:none;
    }

    #247909
    Profile photo of dlongm01
    dlongm01
    Participant

    Does anyone know how to remove the full screen icon from the rich text editor in Buddypress?

    When I edit a profile field from the front end, the full screen button displays a blank screen with no way back to to the editor

    Simple solution is to remove or hide the button.

    Thanks

    #247810
    Profile photo of fried_eggz
    fried_eggz
    Participant

    Yes @henrywright, the settings are correct.

    Steps to repeoduce:

    1. Install vanilla WordPress 4.4
    2. Install vanilla BuddyPress 2.4.3
    3. Use default theme
    4. Post a status update
    5. Create a new user
    6. Log in as new user
    7. Comment on status

    Just to be clear, I’m talking about notifications in WordPress toolbar. Have not checked if email notifications work since I’m on localhost.

    #247430
    Profile photo of Stacy
    Stacy (non coder)
    Participant

    I don;t want it shown on some blogs or during building phase whilst other blogs are already public.

    Tried the global hide toolbar plugin but bp still shows. Any plugins to hide bp in the navi bar specifically?

    #246762
    Profile photo of sLaNGjIs Team
    sLaNGjIs Team
    Participant

    @jeremymh wrote

    Has this been resolved in the new version?

    Yes! !! This plugin not have any issue …

    You have posted this on forum: https://wordpress.org/support/topic/not-working-with-buddypress-installed/ but you have not provided any further information on the configuration used, or other plugins installed, or the conditions in which you experience the alleged problem, for registered and unregistered users, for example, so it is impossible to give assistance. BuddyPress also has to do the settings for the management of Admin Bar or Toolbar.

    @danbp,

    This plugin works at the administrative level, not at the user level.

    What you’re talking about operates at user level, then an administrator, or super admin, has no control of these functions.

    IMHO, given his role as moderator, should not make personal comments about plug-ins, and the work of its authors.

    Thanks.

    #245773

    In reply to: Problems with TopBar

    Profile photo of style960
    style960
    Participant

    Can you post a screenshot of how you think the site should look, and a screenshot of what you see as a problem. I have access to the Kleo theme, and some experience of customizing the WordPress toolbar.

    #245458
    Profile photo of danbp
    danbp
    Moderator

    @canadianmusicnetwork,

    i never used BuddyForms, so i can’t help you with this. Ask on their support if a specific audio field exist or can be added, and how.

    That said, WP comes with all of this, but later. Meaning by this that a user will be able to upload an audio file once it is already registered.

    It is commonly accepted that nothing can be added to a site as long as a new user is not validated or pending.

    On a standart install, i would use a simple text field on a new field group named Audio. And, eg., if you allow 5 files, use 5 fields.

    BP strips HTML on prfoile fields, so it’ not possible by default to get the automatted embed like in a post. Why is unclear to me, as embed is implemented since BP 1.6 for activities, groups, but not profiles… Anyway, a little bp-custom snippet magic (here it is ! ) will let you do this.

    function set_audio_field( $field_value ) {
    	$bp_this_field_name = bp_get_the_profile_field_name();
    	// field name (case sensitive)
    	if( $bp_this_field_name == 'N° 1' || $bp_this_field_name == 'N° 2' ) {
    		$field_value = strip_tags( $field_value );
    		$field_value = '[audio mp3 ="'.$field_value.'"]';
    	}
    	return $field_value;
    }
    add_filter( 'bp_get_the_profile_field_value','set_audio_field');

    That’s it for site admin. Now for the user.

    The new user capability should be “author”, so he can upload files. This is default, but you can change that, if you search a bit on WP’s codex.

    First he have to upload his file. From Toolbar: Dashbord > Media > add new. Then he has to copy the file URL avaible on the media upload page, under “edit” and then in the right menu.

    User goes to his profile > edit > audio tab and paste the file URL into the audio field, save and voila ! Here the result:

    audio display on profile

    That’s only one possibility. the’re others, like custom post type…

Viewing 25 results - 1 through 25 (of 709 total)
Skip to toolbar