BuddyPress.org

Unless someone can see a better way to optimize this file, this is my final online version:

`php_value memory_limit 256M

RewriteEngine on
RewriteCond %{HTTP_HOST} ^thechembook.com [NC]
RewriteRule ^(.*)$ http://www.thechembook.com/$1 [L,R=301]

RewriteCond %{HTTP_HOST} ^thechemistrybook.com [NC]
RewriteRule ^(.*)$ http://www.thechembook.com/$1 [L,R=301]

RewriteCond %{HTTP_HOST} http://www.thechemistrybook.com [NC]
RewriteRule ^(.*)$ http://www.thechembook.com/$1 [L,R=301]

RewriteCond %{HTTP_HOST} http://www.chemhints.com [NC]
RewriteRule ^(.*)$ http://www.thechembook.com/$1 [L,R=301]

RewriteCond %{HTTP_HOST} ^chemhints.com [NC]
RewriteRule ^(.*)$ http://www.thechembook.com/$1 [L,R=301]

php_value session.gc_probability 1
php_value session.gc_divisor 100
php_value session.gc_maxlifetime 3600
php_value session.save_path /path/to/sessions

# Protect the htaccess file

Order Allow,Deny
Deny from all

# Protect wpconfig.php

Order Allow,Deny
Deny from all

# Disable directory browsing
Options All -Indexes

# BEGIN COMPRESSION AND CACHING

# Enable compression
AddOutputFilterByType DEFLATE text/css text/javascript application/x-javascript text/html text/plain text/xml image/x-icon

BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4.0[678] no-gzip
BrowserMatch bMSIE !no-gzip !gzip-only-text/html
BrowserMatch bMSI[E] !no-gzip !gzip-only-text/html

# Make sure proxies deliver correct content
Header append Vary User-Agent env=!dont-vary
# Ensure proxies deliver compressed content correctly
Header append Vary Accept-Encoding

# No ETags, No Pragma
Header unset Pragma
Header unset ETag
# Default cache time to 1 year (31536000 sec)
Header set Cache-Control “max-age=31536000, public, must-revalidate”

# No ETags
FileETag none

# CACHE SETTINGS (mod_expires)

# Turn on Expires
ExpiresActive On
# set default to “access plus 1 year”
ExpiresDefault A31536000
# html – “modification plus 1 hour”
ExpiresByType text/html M3600
# css and JavaScript – “modification plus 6 weeks”
ExpiresByType text/css M3628800
ExpiresByType text/javascript M3628800
ExpiresByType application/x-javascript M3628800

# No cache for php-files

ExpiresActive Off

Header set Cache-Control “private, no-cache, no-store, proxy-revalidate, no-transform”

# END CACHING

# BEGIN WordPress

RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

# END WordPress`

gotcha – didn’t see that before. in the field next to Create Group Capability it appears I can only leave the text “upload_files” in there (it doesn’t take “subscriber”). I deleted the text for Create private group capability and Create hidden group capability but those options still appear when I go to create a new group. I’m clearly doing something wrong….

I’ve now added greater support for allowing access to your site. In the array of allowed URIs, you can now use ‘*’ at the end of an allowed URI,

e.g. Array(‘/public-blog’, ‘/public-blog/*’) would allow access to ‘/public-blog/post-1’, ‘/public-blog/post-2’, etc…

This is useful for allowing greater access to your site while keeping it private, and for allowing access to parts of your site that certain other plugins might require.

See FAQs for more information:
https://buddypress.org/community/groups/buddypress-private-community/home/

@Gpo1, what happened?

Could you give your feedback in the plugin’s forum:
https://buddypress.org/community/groups/buddypress-private-community/forum/

The general response has been good so far, it seems to be working fine for everyone else, so I’d be interested to know what’s going wrong for you.

Did you get an error message?

Hi, I’m the person who started this thread about 5 months ago!

I’ve been messing around with my own solution for a while now, and I’ve created my first couple of WP/BP plugins recently.

In fact, I’ve just released my BuddyPress Private Community Plugin:
https://buddypress.org/community/groups/buddypress-private-community/

Somebody has already given it 5 stars!

It’s basically a single static class that has a few customizable settings, you can block RSS feeds, stop widgets from displaying when the user is logged out, and set an array of pages that are public. Of course you can set the redirect page when I logged out user tries to access a private page too. It defaults to the home page, but I suggest you change that in the config.

There is an example of how to create your own config file for the plugin, one that is saved in a place that won’t be overwritten when you update the plugin and that doesn’t require database access – so it should be a lightweight and quick plugin.

It’s been working great for me, let me know what you think and if you find any bugs!

I just had another check, from another profile and

user with ‘normal’ rights

and the same problem happens,

message is sent to 2 people, One random, and one who I have deleted as admin for spamming via wordpress admin panel

sorry, it is WPMU 2.9.1 and Buddypress 1.2.3 (I think)
there are many plugins installed and some small modifications, but not related to PM

what I think may have triggered it, is i had to delete some spammers, and deleting via buddypress did not seem to work, so I went to wp-admin and deleted one or two spammers there,

but it asked me to transfer their posts to my (admin) profile,
there were no posts, but that dialog box came up, so I accepted it.
and it had completed the delete process successfully,

Hi Roger (and everyone else!), i think i’m going somewhere now, but will need some extra input. hopefully the thread will be an additional useful example!

ok, this is where i am at: default theme with the ajax controllers at the top of the activity stream. in the activity folder of the child theme i have an index.php and activity-loop.php and and entry.php.

basically i’ve got a ‘private’ area with content accessible only to staff. for normal post/pages i have is an extra check based on a custom field for posts and the category for pages like the following and then based on the group membership i either show a message or the actual content:

http://pastebin.com/E4cnkwZS (top)

now, because the group is private, the BP stuff is not showing in the activity stream already, which is good, but the posts/pages bypass my checks and come up in the list of activities showing the actual content which should be private instead.

so, here is what i came up with so far. using the index.php i check the group membership and then load two different activity-loops:
http://pastebin.com/E4cnkwZS (bottom)

how would you exclude stuff? in the bp_has_activity function there is an ‘include’ option which allows to filter content, but not an ‘exclude’ one. it might be trivial to go around it, but not sure how. furthermore if you use the dropdown filter i have the impression that the arguments are passed dynamically resetting whatever is passed in the original query (like in your example and some i’ve tried using the same model).

i would very much appreciate any further suggestion! thanks

bump?