BuddyPress.org

bbpress is the plugin, by type was meant site wide forum or group forum.

can I provide you a link via pm or mail?

No ! You’re on a free help support, maintained by volonteers.

If you want private assistance, use the job board forum where you can hire a freelancer or a dev, but probably not for free.

Which result when you use Twenty Fifteen theme ?
Do you use some custom functions on group page ?

Also, as of Codex https://codex.buddypress.org/administrator-guide/groups/
This is a private group

Options

Group content and activity will only be visible to members of the group.

The messages_mark_thread_read() function will mark a message thread as read. It accepts the thread ID. So, to mark read all new private messages if they have a given subject, you could do this:

function creativesinside_mark_read( $message ) {

    // Be sure we're working with an array.
    if ( is_object( $message ) ) {
        $args = (array) $message;
    } else {
        $args = $message;
    }

    // Mark as read.
    if ( $args['subject'] == 'comment on your post' ) {
        messages_mark_thread_read( $args['thread_id'] );
    }
}
add_action( 'messages_message_sent', 'creativesinside_mark_read' );

@jacipetersilie – best thing I have seen that is close to fbook like chat thing is the free “quick chat plugin” – however I do not use it to show as a widget on all pages and give a popup to users – as I think that would tax the server and web browser more than is reasonable if you have dozens of users – it might work, might not. I use quick chat for a single chat room on a single page.

From what you are describing however, I wonder if you really need a chat plugin to do what you are saying – one to many message – like the super-admin send a message to all users, kind of privately… I think there are some plugins in the wild that allow admin to send an email (Which I guess would be a buddypress inbox notification (?)) – to all users… that would “one to many” message – and give people a way to “message you back” privately I think.

I have also seen a plugin that will allow super admin to add a note to all dashboards – although I guess many bp users will not go to their dashboard when using most features –

I suppose you could also assign users to a group, and select settings for them to get a notice email when a new group message is sent. Which may achieve what you are describing.

If you just want one-to-many messaging chat with users who are actually logged into a chat room, I think it would be easy to do that with nusoft’s av-chat, there are settings in which you can make it so only certain users can post in the chat, have moderated chat, turn off pms and stuff like that – I guess I am not clear on what exactly you are trying to accomplish as I don’t use fbook and am not familiar with the kind of one to many fbook messaging you are talking about.

I can view anyones messages when logged out.

And you’re definitely talking about what BuddyPress refers to as private messages?

Can you try again after disabling all plugins, reverting to TwentyFifteen and removing all custom code? If you still get to see private messages when logged out then that shouldn’t be happening.

With standard buddypress (no modifications) you can freely view anyone’s messages without even logging in

That shouldn’t be the case for all users. Only users with admin capabilities should be able to do that. Are you able to see people’s private messages when logged in as a subscriber? If so, that’s a bug

With standard buddypress (no modifications) you can freely view anyone’s messages without even logging in. Personally I think that is not very good security/privacy, whatever you want to call it.

I made a ticket as I don’t think that “private messages” should be publicly viewable
(https://buddypress.trac.wordpress.org/ticket/6504#ticket)

What privacy/security checks would you recommend for people who don’t want users private data publicly viewable?

@henrywright How would you do the security check? If I follow current way buddypress does things with loading the template part for the tab any logged out user can just modify the javascript and get into any profile page they like. It’s first time I’ve done this so appreciate the advice.

what harm could come from a visit to a simple profile tab?

You could see hidden data that user did not want displayed. I believe if you hold data and say it is private then you should attempt to secure it. You could also view their messages and private groups.

The thing I am struggling to understand is how buddypress functions work on the post request. I wrote some test code and data is correctly populated from displayed user. Does buddypress read a referrer value somewhere on every ajax post?

Hi @richgraphicsstudio,

We need Groups and also Private Groups

I’d activate the Groups component.

Need to be able to upload face pictures

With BuddyPress, uploading profile photos is possible by default.

Hope this helps?

@dono12 – I have split your post into a separate thread.

About the “Starred” feature, do you mean the star private messages feature that you can access under “Messages > Starred”? If not, then this isn’t related to any change in BuddyPress 2.3.0.

Your issue doesn’t sound like it is related to the Messages component, so can you clarify?

Hi @godsdead,
This should not be displayed to non-members. Normally, it is not displayed !
By default, BP private group content is only for

Only users who request membership and are accepted can join the group.
This group will be listed in the groups directory and in search results.
Group content and activity will only be visible to members of the group.

Could it be possible that Paul invited mr dork to join the group ?

Hi @jaykdoe

You could try this:

function my_private_profiles() {

    // Bail if not a profile page.
    if ( ! bp_is_user_profile() )
        return;

    // Allow admin users.
    if ( current_user_can( 'manage_options' ) )
        return;

    // Allow the profile owner.
    if ( bp_loggedin_user_id() == bp_displayed_user_id() )
        return;

    // If we get to here, redirect to homepage.
    bp_core_redirect( home_url() );
}
add_action( 'init', 'my_private_profiles' );

You can copy and paste it into your theme’s functions.php file. Please note I haven’t tested.

The username serves multiple purposes:

1. It’s needed internally for use in URLs etc. First name and surname won’t play nicely in this context because you can’t have spaces etc in URLs.
2. It’s used as a ‘friendly’ unique identifier. What happens when you have 2 members named John Smith? How do you private message the first John Smith without private messaging the second?
3. There are probably more purposes I’m missing?