BuddyPress.org

I would check in the BP plugin repository: https://buddypress.org/extend/plugins/

Is this plugin what you’re looking for? https://wordpress.org/extend/plugins/buddypress-real-names/

And this plugin does the exact opposite: https://buddypress.org/community/groups/buddypress-usernames-only/

Okay. Issue resolved. This time I deleted everything and activated buddypress and selected the default theme. No additionals plugins at all. And it works okay. All the group/forums capabilities work as expected.
Now, I’m going to install one pluging at a time and re-check if functionality remains the same, till I find out which of the plugins is causing the malfunctioning.
I had installed several plugins including: tweetstream, facestream, SEO for buddypress, bp like, bp friends, etc, etc. One of those is crashing the group/forums feature in buddypress.

I’ll let you know which one is causing it after I finish testing.

Regards.

Martin

Howdy. I’m experiencing the same problem. Not only group creation is involved. After not being able to continue to the select group avatar step whilst creating a group. I go back to the groups page index and the group is there. However if I try to create a topic I get the error: “There was an error when creating the topic”.
Though I only have one group created, the group count says 4!.
Regarding the discussion capabilities for groups I have installed bbpress through the built in installer in buddy press. bb-config.php looks okay. All the involved directories have the right permissions.

I deleted all the files from the server, dropped the db, re-installed from ground without any additional plugins and it still produces the same error.

I wonder if any of the developers can give us a hint on what to check.

Regards!

Martin

PS: I’m running WordPress 3.0, Buddypress 1.2.5.2.

As far as I know, avatar uploads have always been disabled or not functioning because we don’t use a traditional blogs.dir directory.

BuddyPress 1.2.5x hasn’t really been built with the WordPress 3.0 menu system in mind. I know we’ve got some page title bugs on a WordPress network/WPMU install which I hope to get time to fix in a couple of weeks so this might clear up then.

I’m waiting for @johnjamesjacoby to merge the 1.2 branch into the 1.3 trunk so I can get patchin’

I’m just not sure where you’re coming from. Can you give a few specifics?

1) You can control what is displayed on your home page by manually modifying the home page template.

2) Not sure what you mean here.

3) The bp-default theme has been criticized for throwing all the features of BP at the user. Features can be disabled in the BP admin area, as well as through a custom theme. Test out BuddyPress on the test site – http://testbp.org – see if it fits your needs.

The index.php one is not necessarily to do with IIS; see https://trac.buddypress.org/ticket/2552

@rossagrant Unless someone merges virus to PDF, yes it’s safe

@djpaul: this problem arises regardless of whether i’m using a default theme or a modified theme with the buddypress template pack. is there a trick i could use to identify the source of the problem… perhaps a tool to troubleshoot javascript performance with buddypress activated?

I’ve gone through all the BuddyPress files and inserted ‘/index.php/’ after each of the root_domain elements and that fixed it.


. clean_url( $bp->root_domain . '/index.php/' .


Someone else could probably suggest a better way of doing it that links into WordPress’s permalink structure.

Hi @rossagrant, @r-a-y & @hkcharlie,
Thanks for the good question. So, there are three separate questions here that are slightly but significantly different, and often get merged into one.

First: ‘Can people upload malicious things?’
Yes. Say I have a file MyVirus.exe. I can rename it to MyVirus.exe.txt, and upload it to the site. Adding a MIME type check would help significantly, but it’s not foolproof, as the MIME type can also be spoofed. What it would do is take what I would call a “casual” malicious user out of the picture, as only more experienced and/or motivated malicious users are going to go through the trouble of spoofing MIME types. Although this sounds terrible, it’s not as bad as you might think, leading into the next question…

‘Will this cause any problems for my website/server?’
No. This is not much of an issue for several reasons. The main reason is that Apache doesn’t give uploaded files executable permission. So, even if a virus is uploaded, and a user clicks on it, the most likely scenario is that the user will see the source code (which may be a bunch of junk if it’s a binary file). Even if it was a file that the web server could process (like a PHP file or shell script), it still would just display the source.

‘Is this a hazard to my users?
Not Likely. Given the above scenario, Someone malicious would need to rename a file extension, upload it to the site, get people to download it, and get people to change the extension. So, if the user is really dumb, it’s possible. I’d like to think that someone that goes around downloading things and changing extensions from txt to exe would learn their lesson pretty quick.

I hope that helps. If someone is a security expert, I hope they might add more to the topic, but those are the risks to the best of my knowledge.

It’s a known problem with BP and WP3 – lots of people are having the same problem:
https://trac.buddypress.org/ticket/2456

Hope it gets sorted soon.

Yes, just go into the Buddypress settings after you install it and disable all the other components. FYI a more descriptive topic title would be appreciated for any future posts?