BuddyPress.org

Hi Andy, I think you are incorrect there. Spammers like to send spam. I am sure you get some in your email?

What is easier to get into a nice big community (without having to create a blog) and easily (?) send spam PM to all members of the community? You don’t even have to infect computers, as you can use the internal messaging system and you know most users will get the message as an email as well.

Hey, it saves them from email harvesting or buying ‘5 billion email addreses’ dbases as the community has already done this.

So, no, apparently (and this example that started this topic has proven this), it is possible on BuddyPress and it serves the spammers purpose, so disabling blog registration will not stop this. You can disable blog and user registration, but it might be hard to start a community that way..

Cheers, Harry

Hello.

I do have spam user registrations even with registration option set to:

[*] Only logged in users can create new blogs.

I understand this option to say that new user registrations are DISABLED but registered users may create blogs. Unfortunatly the “Register”-Button appears in the welcome widget with that setting — even though clicking it will redirect back to the homepage.

To disable the above option also disables the blog creation — which I do NOT want.

For an unkown reason I do see spam registrations (a couple per week) but it seems those users are not able to login and create blogs (or comment). I also do NOT get the usual notification mails for new user registrations.

It seems like a bug to me.

Looks like registration is disabled on your site. Do you have a guest username and PW I can use?

These functions should sort you out, garynagel:

function sv_check_current_users_blog( $active_signup )

{

if( ! is_user_logged_in() )

return $active_signup;



if( current_user_can( 'YOUR_CAPABILITY' ) )

return $active_signup;

else

return 'none';

}

add_filter( 'wpmu_active_signup', 'sv_check_current_users_blog' );



function sv_remove_create_blog()

{

if( ! current_user_can( 'YOUR_CAPABILITY' ) )

bp_core_remove_subnav_item( 'blogs', 'create-a-blog' );

}

add_action( 'wp', 'sv_remove_create_blog' );

You need to place these functions in your themes functions.php and replace YOUR_CAPABILITY with whatever capability you want to check for. You also need to have blog creation enabled. I’m using a slightly modified version of this to restrict users to maximum 1 blog, so I didn’t test this code at all.

The first function uses a filter to set the variable $active_signup to ‘none’ if the current user does not have a certain capability and for that user blog creation will be disabled. If the user has that capability the variable is not changed.

The second function removes the blog creation tab from the submenu. You probably need to modify the registration page as well.

Hope this helps.

Hi elemsee – great avatar!

If you disable blog registration through the wp-admin backend, where do you still see ‘create a blog’ etc options? We can create a Trac ticket to get this improved for a future version.

this is a great plugin. since I do not want anyone to create a blog with a group (so far users are only allowed to start their own group and blog registration is disabled): How could I – as admin – exclusively attach blogs to certain groups? Is there any way that only admins (of bp and not group admins) are allowed to create “group blogs”?

thanks,

Reiner

I’m struggling with a lot of spam registrations.

– a lot list country entry as random characters “Ot9XLfiFD7WNCu” Is there a way to set Country so it has to be a legit one?

– a lot come from email addresses such as “myspacee.info” “@mysace.info” Is there a way to force email confirmation … so they have to receive an email and click on a link to confirm registration?

– is there a way to mark someone as a spammer and delete them at the same time in the admin?

Sigh… I don’t have time for this so I may give up.

Would be nice if a site user can “Flag” a spam entry to disable the user.

You also have to secure your bbPress install from spam signups (if you have forums installed).

Things you’d want to do is disable registrations in bbPress and redirect attempted signups to WPMU’s signup page.

Just disable blog registrations in your Site Admin > Options panel. And please take some time to do a cursory search of Google or the WPMU forums as this is a basic question and nothing to do with Buddypress.

Am I reading this right? Couldn’t jorrie just disable user registration?

1) With WPMU and a user account, you can comment on any blog (provided you’re logged in)

2) This is possible… that page is a template file, so you could customize that with whatever you want.

3) If you already have users blogging on WPMU, BuddyPress will detect these user’s blogs (I’m quite sure BP detects them!). BP groups and forums build off of WPMU’s userbase; groups being a BP thing and forums being a BP/bbPress thing. So when you install BP, your users will have to configure their groups and forums from scratch.

4) Not sure on this one. There’s an option in WPMU to disable blog registration, but if you do that I think it will disable blog registration sitewide. This would be a better question for the WPMU forums.

5) BuddyPress does indeed utilize bbPress for forum functionality. The next version of BP will make it easy to integrate with. Right now, it still requires some grunt work.

You say want a forum for each blog? That’s a little overkill… but something like this can be accomplished with groups and a BP plugin (Marius Ooms’ groupblog plugin or Burt Adsit’s BP Community Blog plugin)

6) Yes you can list all blogs on a page using a WPMU function.

Hope that helps!

Any luck with bad behavior? I was having good success with wp-hashcash but recently found it was blocking all registrations. Even a legitimate one could never get off the wp-signup page. I finally had to disable it so people could register, and now I’m back to getting splogs again. All of them seem to be a name then numbers (angie539034). Very frustrating.

Tried checking your site out but I can only see a wp-theme. Clicking registration gets me this:

http://current_site_domaincurrent_site_path/

Have you disabled it or is more things not working?

Nope, Im afraid there´s not a newer version.

1.1 was coded by Andy himself, and there are no signs that it is going to be updated. He has made clear many times that its up to Buddypress community to continue with the update of Facebook connect plugin.

If I had coding skills, I would have updated it a long time ago, but I am still busy understanding how BP works ! ;-(

If you have disabled registration on your WordPress MU installation, and users are still signing up, you may have forgotten that if you are running group forums you have a bbPress installation that synchronizes users with the WordPress MU installation. Disable registration in bbPress and you should be good to go.

the fbc_get_avatar() error is from the facebook connect… it’s been addressed somewhere else in the forums. ..it’s been fixed. The spam.. the user “LnddMiles” is not just on buddypress sites, so it’s a spambot that looks for open registrations.

You should add a captcha or math problem to your registration page to divert these.