5887735Inactive
I’m getting these on my own site. These are spam bots and they found a way into BP. This should be a number one priority for BP. I’ve seen this stuff with phpbb and other CMS. It very easy for these people to bring down your site.
there is a plugin “BuddyPress Profile Privacy” which can make profils available only for friends
i’m alsa searching a plugin to filter member, activity etc to logged users…. but i didn’t find so far ..
Yeah I just got two spam private messages in the last two days. Here is the latest one:
Please reply back with my email (anabel . awaza 01 @ yahoo . co . uk)
Dearest,
How are you over there?
I know that you would be excited for the fact that you do not know who is writing.
Actually my name is Mis. Anabel Awaza,Please my dear i will like us to hold a good long time relationship with real love.and I have something very important that I need to share with you. I am very serious; I shall tell you more about myself and send you my picture in my next mail.please reply back with my email address (anabel . awaza 01 @ yahoo . co . uk))
Hoping to hear from you soonest.
Yours Anabel.
View Spammer’s BuddyPress profile:
https://buddypress.org/community/members/anabel4you/
Anonymous User 96400Inactive
I’d keep group types separate from your normal types (public, private, hidden). You’d still want a group of a certain type to be able to be either public, private or hidden…
5887735Inactive
Message spam is getting out of hand.
yeah but whenever users create new groups I’ll have to add in a new group type like ( public, private, hidden, customgroup1 or whatever ). But I guess the reason for using group meta would be because it’s easier to cache?
I just got points, donate link and rank (if enabled) displaying on the BuddyPress Profile 
You’ll have to edit 1 file though. Here is the updated code.
So how it displays on mine is:
User @ user
1635 points [Donate Points] Expert
active 6 hours, 32 minutes ago
Cancel Friendship
Mention this User
Send Private Message
How would I incorporate this into my plugin though? I got this to show up on the profile. But it’s not where I want it, how would I control it without just editing the file directly.
I have found a solution to my problem – but don’t know exactly why these issues arose. I shall elaborate in case anyone else has similar problems:
I have also been experiencing problems with the themes for blogs being all messed up. Regardless of how they were activated – either globally or on a blog-by-blog basis, they never displayed properly. Possible an obscure redirect issue. At the same time I was experiencing the messaging issues for which I started this thread.
I think that these problems cropped up sometime between:
– upgrading from WP MU 2.9.1 > 2.9.2
– upgrading Buddypress 1.2.x > 1.2.3
which were both done manually AND
– trying out a whole buch of plugins that had not been tested (or verified) to work with my versions of BP and WPMU.
So I rolled the whole site back – files and mysql to about a month ago – before I upgraded and fucked up my database. Then copied any posts, files, members, activities etc from one database to the other…
So the lessons I learned from the sorry mess is:
– Backup regularly (this goes without saying)
– don’t try out spurious plugins that may damage your install (and lead to days of head-beating-on-wall WTF? moments)
Also – running the whole site on Amazon Web Services which gives you cheap access to ubiquitous storage (S3) at insanely low cost. So I run a script that backs up all files and mysql from the site daily and hang the GB that will accrue – because each GB cost something like $0.01 – or something….And this just saved my sanity.
Regards
Ajax
@vee_bee I’m using the BuddyPress Template Pack Plugin with my Single Install WP. So I updated my:
wp-content/themes/fusion/members/single/member-header.php file with this and it works great. Shows the points for the member your viewing at the moment. Tried to get the donate link to work as well. But no success just yet.
These forums don’t allow you to embed code like the wordpress.org forums I guess. In the echo’s I’m just surrounding it with a bold tag
<?php
// Cubepoints for current user
echo ““;
if(function_exists(‘cp_displayPoints’)){
global $bp;
cp_displayPoints($bp->displayed_user->id);
}
echo “
“;
// END Cubepoints
?>
So how it displays on mine is:
User @user
1635 points
active 6 hours, 32 minutes ago
Cancel Friendship
Mention this User
Send Private Message
hi @r-a-y is_site_admin() and is_admin() are very different. is_admin() checks whether you are inside wordpress admin or not.
@scotm
How about making the activity of admin user private
`add_filter(“bp_activity_hide_sitewide_before_save”,”make_admin_activity_private”,10,2);
function make_admin_activity_private($hide_sitewide,$activity){
//get the current activity
if(current_user_can(‘manage_options’))//user is admin
return 1;
else
return $hide_sitewide;
}
`
Hopefully the code goes through this forum.
Is this happening with all kinds of input? Forum posts, private messages, activity items? Also, what version of bp-tinymce are you using?
I haven’t been able to test this completely, but it seems like the automatic group adding isn’t working if the group isn’t set to a public group. If it’s set to private then it seems like it tries to make the request maybe, but isn’t finishing the process of adding the person to the group. I’ll look into this more as I have time unless you get a chance to look first.
Wow 😮 thanks 3sixty for moving it up, maybe I was being too respectful should have changed it myself
And thanks JJJ for the quick patch to #2343 Can you also look at #2293 if you’re not already.
“Post something to xxx”
This actually should be described more clearly. It is ambiguous whether you are posting something to them privately or publicly (until you try it out).
woop! updates:
1. I changed the milestone for your bug report to 1.2.3 and added a link back to this thread so the rationale can be seen
2. JJJ has patched the ‘promiscuous’ bug already!!!! I have not had a free moment to test yet: https://trac.buddypress.org/attachment/ticket/2343/forum_id_check.patch
Well cared for? yes guess it was but I’m still concerned that it generated no other interest or was that simply that the milestone was set to far in the future?
No hidden groups shouldn’t be used period until such time as this issue is correctly dealt with, hacks worry me used to cure this sort of problem. however given that Boone looked into this I’m pretty happy the fix is a fairly safe short term fix.
As you spotted I questioned whether or not the milestone should have been moved up? to 1.2.4 but it was a question unanswered, I placed it in 1.3 as I wasn’t sure where it ought to have been placed but asked the question upon creation and notification in original forum thread.
OK, that trac ticket looks well cared-for. However, I agree that one should be a 1.2.4 milestone item rather than 1.3… hidden and private groups really should not be used without that fix. Will it moved up to 1.2.4?
“you are able to view updates/comments made by a friend who is a member of a hidden group … not only can you read content made to a group that you should not be able to read but you can also use the ‘reply’ to add a comment”
ACK! Are you serious? What is the trac #?
This is similar to an issue I found and have an open ‘Critical’ ticket on.
If you go to your account and then activity > friends you are able to view updates/comments made by a friend who is a member of a hidden group but which you are not, what is worse is that not only can you read content made to a group that you should not be able to read but you can also use the ‘reply’ to add a comment that will then appear in the hidden group.
I’m afraid that for me hidden groups are no such thing and represent a real issue if people use them believing them to be hidden and private in nature.
To date I have had little response on this, the ticket is still open and but for the very kind help of Boone, who helped or rather provided a interim hack to hide the activity altogether, there feels as though there is not a huge deal of concern over an issue of this nature when Andy dropped into the forum thread I raised on the issue it was simply to tick me off for incorrectly referring to hidden groups as ‘private hidden’ – Sorry Andy just thought it may have merited a little more concern than nomenclature issues
Hi Thanks for the reply.
Yes i will need non members to be able to contact a member without being logged into the website. I was aware off the private message as you pointed out but i really need non logged in users to be able to fill out a contact form and send to a members profile email address.
“I would like the Members profile to have a contact button which when clicked allows the users to send an email to the member?”
Actually, when a logged-in user sends “Private Message” to another member, the latter receives the message in his/her email inbox. Or did you need a contact form for online visitors who are not logged in so they could touch base with any member of your community?
5887735Inactive
I noticed “add friend” was replaced by “follow.” Profile details seem private. And, I like the permalink button in the activity streams.
