BuddyPress.org

Thanks shanebp for sticking with me.

You missed the post where I explained the problem when registrations continued even when I disabled them (about 3 posts up from this one). Basically, there were thousands of pending registrations (i.e. with unconfirmed emails) that were slowly being completed by the malicious registration process. I did not want to simply delete them directly from the data base since that always carries some risk if you don’t use the API’s. I found plugin “unconfirmed” which enable me to view and delete them. Once deleted, the registrations stopped.

Also, thanks for your idea about the keys and salts. I don’t think that’s a problem since I have deleted all of the automated users AND all of the pending registrations. All of the automated registrations will have to be done again. Unless there is a reason I haven’t thought of, I’d rather not inconvenience my valid users.

Thanks again, Rick.

OK, here’s a followup on my trying to find the source of the automated registrations.

— I disabled bbPress on the network plugins page.
— I renamed the following directories:
wp-content/plugins/bbpress
wp-content/plugins/buddypress/bp-forums
wp-content/plugins/gd-bbpress-attachments
— enable registrations from the network admin settings

And… the automatic registrations CONTINUE.

— disable registrations (network admin) and the automatic reg stops

SO, it’s beginning to look like it is not bbPress. PLEASE ADVISE:

• Do you agree? Or is there some other possibility that will implicate bbPress?
• What other possibilities are there for by-passing registration protocols?

Here’s a followup on my progress in stopping the automated registrations. It turns out that my side issue (see my first post) was very important. I found a plugin called “unconfirmed” that gives you limited access to the user records with unconfirmed emails, including the ability to delete them. I had 7100 unconfirmed registrations. The plugin is not fully implemented, so I had to delete them about 20 at a time. (I figured I was not likely to find anything better, so I bit the bullet and deleted 300 groups of records.) Once deleted, the registrations stopped.

So here’s the analysis: there were thousands of pending registrations. For whatever reason, the automaton that started the registration process either could not respond to the email, or was designed to respond to the emails slowly.

So, now I have some time to diagnose the solution to the problem without the fear of my data base being flooded with crap.

Next I’ll try to disable bbPress to see if it’s the problem, but I really don’t want to delete it as I already have several forums configured. I’ll see if I can disable it without deleting it and then turn registrations back on at the network admin level to see if they start up again.

Follow up comments:

I am using the theme Prose (child of Genesis) from Studio Press if that matters.

I would be willing, as a stop-gap measure to manually register people, but the spam registrations are bypassing the “registration is disabled” setting.

Rick.

Hi @modemlooper. Thanks for your reply. Yip. I created it in the backend but it doesn’t show up on the registration page. I also disabled all buddypress related plugins and then buddypress and deleted and re-installed but the settings remained.

@mercime thanks but I feel very sheepish!

invite anyone has an option for this: https://i.imgur.com/g6h2j8s.png

“Allow email invitations to be accepted even when site registration is disabled”

No. THat has no effect. I’ve disabled EVERYTHING except BuddyPress, and it has no effect.

Will do, @Henry. The other bad news (for me) is that I disabled BuddyPress and tried the RegLevel plugin and found it’s not compatible with WP 3.6.1. But I’ll still try it in functions.php as I may get lucky and find a plugin that allows role level registration.

Thanks.

@Henry, thanks for your help. When I use the firmasite_redirect_bp_signup_page function I’m redirected to /wp-signup.php with the message about the loop. When I delete the function I’m redirected to the BuddyPress login/registration, which, on my site is /login. So yes, WP login is redirecting to the BddyPress login/registration.

I haven’t been able to disable WP redirecting to BuddyPress.

enable/disable WP toolbar for logged out visitors? I’ve only ever seen the WP toolbar when logged into WP, where can I update this and is it used instead of the “bbpress login widget” ?

Aces! You are Aces! That’s exactly what I was trying for. I believe it needs to be either included in the codex, or as a checkbox “Enable default WordPress Registration”

Thanks!