BuddyPress.org

OKay, I followed this guy http://androoha.com/web-design-tuts/80-custom-notifications-buddypress-en

And it did a trick, in some way, so I will extend my question here.

I managed to add function which adds notifications to database when I like an activity.
It displays it well when I have only 1 notification with such component_action.
But when I have to, it just merges my notifications into one, or something like this, sometimes it even brokes (but might be another issue)

so here is my code in functions.php

function bp_members_format_notifications( $action, $item_id, $secondary_item_id, $total_items, $format = 'string' ) { 
	global $bp; 

	switch ( $action ) {
		case 'new_likes': 
			$thanks_for      = $item_id; 
			$who_thanked     = $secondary_item_id; 
			$link = '/heregoeslink'; 
			$return = '<a href="'.$link.'">'. $who_thanked .' liked your link!</a>'; 
		break;
	} 

	return $return; 
}

I have 5 notifications in database with new_likes component_action and 4 of them belong to current user. so $total_user contains “4”,

now I want to remake this code to display user notifications separatly.

Many thanks even for reading till this )) I also try to continiue thiking for an answer and if something I’ll post it here

Please try to supply answers to the following questions.

1. Which version of WordPress are you running?
Lastest (stable)
2. Did you install WordPress as a directory or subdomain install?
Directory
3. If a directory install, is it in root or in a subdirectory?
Root
4. Did you upgrade from a previous version of WordPress? If so, from which version?
No
5. Was WordPress functioning properly before installing/upgrading BuddyPress (BP)? e.g. permalinks, creating a new post, commenting.
Yes
6. Which version of BP are you running?
Lastest (stable)
7. Did you upgraded from a previous version of BP? If so, from which version?
No
8. Do you have any plugins other than BuddyPress installed and activated? If so, which ones?
Yes, many plugins and all of them BP related, since I don’t have any error/problem with my current installation, I won’t insert here this big list. Need to mantion BP Like/Dislike though
9. Are you using the standard BuddyPress themes or customized themes?
Standart
10. Have you modified the core files in any way?
Yes, In many way 😀
11. Do you have any custom functions in bp-custom.php?
No
12. If running bbPress, which version? Or did your BuddyPress install come with a copy of bbPress built-in?
Lastest, I downloaded it from WP Plugins
13. Please provide a list of any errors in your server’s log files.
Strange but no errors (with Debug turned off)
14. Which company provides your hosting?
Local installation
15. Is your server running Windows, or if Linux; Apache, nginx or something else?
Linux Ubuntu, apache 2.2 php5

Ok. I was finally able to get WP to reinstall and it appears to be working now.

Thanks

i found the error… its that internally BP saves the pages as lowercase, but when using upper case (arabic in URLs are sent to the server in upper case for some reason) then it gives off the 404 errors.

what do you guys suggest i should do?

@bp-help

good suggestions. thx. 2 of them r new to me, so other people may find them helpful also.

on our sites we r using::

Keith Graham’s most excellent ‘stop-spammer-registrations-plugin’ – https://wordpress.org/plugins/stop-spammer-registrations-plugin/

– has stopped over 53,000 spammers since feb this year! it uses external lookups on StopForumSpam, ProjectHoneyPot, BotScout, (Akismet, which we dont use), others – thus great collective benefit/advance warning of bad traffic. also traps brute force attacks (bad logins/registrations/comment posts, etc), etc. is simple enough to play nice with most plugins.

to try & keep as much load off the front-end of the server as possible, we also have set up:

linux iptables ( & ufw add on )- as the basis of all firewall stuff. also has our manually maintained blacklists & whitelists. various custom rule chains setup. takes a while to get your head around, but is essential.

linux fail2ban – essentially an add on to iptables, puts people in jail for bad behaviour – eg: brute force attacks against ssh, ftp, mail logins. we also have set up custom rules detecting bad activity against wp-login.php itself via fail2ban. am looking to do some more with this.

linux apache – mod-security2, libapache2-mod-evasive, libapache2-mod-antiloris, libapache2mod-spamhaus – which help protect against general bad behaviour, DDOS, blank header attacks, the infamous ‘Loris’ script (which we’ve experienced!), and bot-nets. still assessing how effective these r.

we have also had to tune apache on our VPS for resilience in the face of DDOS type attacks and heavy-handed brute force attacks.

some further good tips here: http://www.dannytsang.co.uk/index.php/apache-2-hardening-tips/ & elsewhere.

linux logwatch – reports various access stats (the good & the bad & the ugly) via email – very useful indeed for checking whther situation is under control (or not).

linux rkhunter – scans for rootkits on the server from time to time – just be sure – & particularly useful if u ever do get infected in hunting down the intruder’s code.

obviously we also have file system bolted down. (there is a good wp plugin to check permissions bolt-down, i forget what its called). we also spend a LONG time analysing logs etc.

anway, that takes care of many of the bad boys, but we r still left with the following problems to crack:

1) we have observed that many bad bots/scripts are exhibiting ‘learning behaviour’ (ie. heuristic) and r finding ways around fail2ban rules/jails, etc. in particular:

a) rotating IP addresses to match ‘ban counts’ – currently we have them wasting an IP address every 3-4 attempts, but they still seem to have an inexhaustable supply, else are spoofing extreamly well.

b) varying their retry period to match the length of jail sentence. (ie. they are not wasting their mips whilst in jail, just enough to detect when they are released,record it, and tune their future responses).

2) content scrapers, probes and bad-bots generally – these r wasting enormous resource on our servers. typically i would suggest such ‘bad traffic’ is responsible for over 50% of total server load (ie. not good at peak times on a busy site). additional problems we r facing here:

a) bad bots often spoof the agent string to pretend to be eg. google, bing, etc. the only way u can tell is by reverse lookup of ip address and try and match to one of well known range of ‘good bot’ addresses. but, despite fact that many ranges are well known, most of them are never actually published or confirmed, many are variable. i am not aware of any definitve list of ip addresses of good bots (though there is http://www.iplists.com/ whichis not bad, & http://www.webmasterworld.com/search_engine_spiders/ which is often helpful – these are very much ‘best efforts/as seen in the wild’ lists.). this problem worsens with the rise of social network agregation services, other (legitimate) content agregators, and personal content aggregating software on mobiles, tablets, etc.

idea: i am thinking of writing a script/plugin/rule to do smart lookup of ip against good bots list, & to automatically maintain that (collective) list. ideally, this is a service that someone like spamhause, or projecthoneypot should offer, since they already have the infrastructure. but, we’ll see. the script will detect traffic ‘purporting to be a SE bot, of any kind and to ban it via iptables if it isnt in the approved list/doesnt check out. the risk is in false positives and harming ones SEO. anyone any thought in this area?

b) probes & sniffers hunting out wp/bp forms, ajax ports, plugin files, forms, etc – in advance of main attack by penatration/spamming bots. typically always use swiftly rotated ip’s. many many variants out there. usually they have no luck on our sites, but that does not stop them trying in vast numbers (bot-nets, collectives? hives?) and harming out response times, etc.

idea: url obfuscation has been brought up on this forum before, particularly for eg: login, registration, admin url’s, etc. i am thinking of creating a plugin to dynamically hash encode links of choice using someething based on wp forms nonce system. not only useful for causing probes & hackers pain, but also to help thwart media thieves. obviously, scripters will soon respond by just snanning for link titles in html, so not bullet proof in any way, but they will at least be on 1-time request code, so causing them page reload every request & less sophisticted scripts will be totally wasting their own time.

anyway. these have been my thought so far. would love to hear experience/insights of others.

unfortuntely wordpress & buddypress sites in particular represent the richest of prizes for hackers, content scrapers, spammers, etc – & they r really on our case. furthermore, there is some BIG money involved, from porn to pharma to credit card fraud; that means some very smart programmers being paid excellent rates, to hack our systems, full time. add to that, the 10’s of millions of infected machines out there (often unknowingly) operating as botnet drones, trying to pernetrate our servers 24×7, steal our machine resources and steal our members personal data. it is a war of attrition.

all further experience, ideas welcome, here.

Yes, for some reasons I yesterday I removed the buddypress plugin beta to come back to the 1.7.2 version but forgot to install it again.. sorry for it, now i put it back
No i didn’t do as you suggested, I will now. (5 mins ago I sent a message to the theme author)

p.s. sorry for not considering your comment (the first one) but on that moment I found the other one more clear. (i’m a BEGINNER in these and you speak a lil’ bit too complicated, you have to tell me step by step what to do…no offence)

Will do. THanks for the warning. Wish BuddyPress had this built in. 🙁

It ended up being the buddypress group hierarchy that I installed. When installed it reverts to its index file.

Its fixed. Thanks for your help

Hmm, everything seems to be correct. Is there a chance it could be pulling from somewhere else?

Here is the index.php file –http://jandjtestserver.com/share/help/