BuddyPress.org

Confirming this bug, which lead to some drama on our forum. You think private topics are private, but turned out that if you click on the last reply links from a private forum, you sometimes can get in even when you don’t belong to the group. Not funny.
Also, subforums don’t inherit the settings from their parent forum.

1GB RAM is a minimum, 2GB RAM is ideal. As you scale up you may need more. On a good server setup you can actually see live (via SSH) how much of your RAM is being used up and how much is free. If you’re bottlenecking, you can contact the hosting company to add more RAM or bump you up to the next server. That is not the same as migrating to a new host… if it’s within the same company they should handle it for you seamlessly in the background.

Another option is to use Amazon (AWS) instead of a private server and it just scales up automatically as needed – they mostly charge by data rather than by server. They will be more expensive for most sites and will be slightly harder to set up, but they are also incredibly scalable.

A CDN isn’t really a “cache” in the way you imagine W3 working. It’s only caching resources (stylesheets, images, javascript files, etc) but not caching “content”. Your resources usually don’t go stale because they are not updated often. And if you do it properly, the cache can be broken any time you update a resource (by adding a version number to the enqueue in your theme). The version number gets appended to the URL of the resource, so if it changes the CDN thinks it’s a different file and immediately serves up a new file.

Content does go stale. By content I mean the data that is outputting for everyone to see right on the website. Like a profile, activity page, member directory, etc. This is the stuff that plugins like W3 are primarily used to cache (among other things as well).

You can integrate a CDN very easily using WP Super Cache. You can just turn off the content caching stuff and use it only for pushing your resources into a CDN. It’s a set it and forget it kind of setup for the most part.

If you happen to be in the Miami area on May 9, I’ll be speaking about scaling BuddyPress at the BuddyCamp (1st day of WordCamp Miami). http://2014.miami.wordcamp.org/
Should be a fun event.

@batmanfan You can make a forum private, public or hidden.
Check out the doc: https://codex.bbpress.org/getting-started-with-bbpress/

You have no idea what you can learn by reading it. =)

Basically yes.
The Sitewide Forums are available to everyone, while the Group Forums are a private forums for a specific group. Other than that, they just share all the normal forum functions.

Have you looked in the db to verify they weren’t deletes? Do you have any plugins installed that might effect that? I remember testing a private activity once that sent notifications even though someone didnt have access to them.

You can prove your theory about the majority being messages by looking in the notification table. In there there are fields that will tell you what component the notification is for (messages, mentions, friend requests, and so on). Hover you mouse over the read/delete actions for the notifications with missing titles. You’ll see the notification ID. Look for those specific IDs to see if there is a common component where this is happening. Either way, you can get the item_id (what you were actually notified on) and verify that item actually exists. If the component is ‘activity’ look for item_id in the activity table. If its from the messages component, then you can look for the item_id in the messages_messages table. (though even if the sender deletes the message, it will still be in the db, so this might not get you anywhere actually)

I’m curious to know what you find. Good luck.

I have the same thing to me and not display private message button, etc

First question would be to ask if your on shared hosting vps or private server?
maybee this link will help you if you take a look. i dont know what hosting your with but have a read anyhows.
https://wordpress.org/support/topic/godaddy-iis-and-removing-indexphp-in-url

p.s i dont know if there is a solution within that post but it may help you find out a little more.

also just found this post too for you.

https://wordpress.org/support/topic/getting-rid-of-indexphp-from-url

@xxxtristamxxx
Try: https://wordpress.org/plugins/private-bp-pages/
Full disclosure, I am the plugin author.
Good luck!

1. Event integration would be great, including inviting people to an event and being able to mark as attending not attending etc for users.

2.More privacy options on public groups such as being able to stop them from showing in the activity stream altogether but still allowing people to join without requesting.

3.Option to turn on some form of automatic activity refresh (for those people who have dedicated servers with good resources)

4.Privacy in general, being able to set your profile to public private or friends only etc.

5.Notifications to show avatars.

The fix is posted here: https://buddypress.org/support/topic/404-error-on-request-membership-for-private-group-in-bp-1-8-1/#post-179495

Most of wordpress plugins mentions above work like

Attacker > HTTP server > PHP > WordPress > PLUGINS

We all need to have something before WordPress that’s why I recommend

NinjaFirewall (I do not have any relation with the plugin creator)

https://wordpress.org/plugins/ninjafirewall/

Block the attacker before the WordPress

Attacker > HTTP server > PHP > NinjaFirewall > WordPress > PLUGINS

As always in installing any plugins that possibly can block your admin access you have to read the Installation note and have access to the FTP.

NinjaFirewall will work as another layer to protect your site.

In addition if you have not done it:

1. Change your “Admin” username to something dificult and at least 10 characters (+) but easily to remember (+ for you – for security) or you have to read a note (-) safely secured in your safe locker (+)
2. Make your password at least 25 COMBINATION of characters (+) but easily to remember (+ for you – for security) or you have to read a note (-) safely secured in your safe locker (+)

NinjaFirewall:

• Web Application Firewall
• Full standalone web application firewall
• Multi-site support
• Compatible with shared hosting accounts
• Protects against RFI, LFI, XSS, code execution, SQL injections, brute
• force scanners, shell scripts, backdoors and many other threats
• Scans and/or sanitises GET / POST requests, HTTP / HTTPS traffic, cookies, server variables (HTTP_USER_AGENT, HTTP_REFERER, PHP_SELF, PATH_TRANSLATED, PATH_INFO)
• Sanitises variables names and values
• Advanced filtering options (ASCII control characters, NULL byte, PHP built
• in wrappers, base64 decoder)
• Blocks username enumeration scanning attempts through the author archives and the login page
• Blocks/allows uploads, sanitises uploaded file names
• Blocks suspicious bots and scanners
• Hides PHP error and notice messages
• Blocks direct access to PHP scripts located inside specific directories
• Whitelist option for WordPress administrator(s), localhost and private IP address spaces
• Configurable HTTP return code and message
• Rules editor to enable/disable built-in security rules
• Activity log and statistics
• Debugging mode

Hi 🙂
Did you enable the messaging system in the first place?
If not you can activate it in : Settings/Buddypress/ and on the first page, check the messaging box

If you enabled this option already you should have a tab in your profil to send private message

[Edit] Wait what do you mean by “forums”? there are no forums on buddypress, are you talking about bbpress?

Actually that Private BP Pages plugin looks pretty much ideal for what you want @mrbirl.

It would help if you listed the plugins, and details about anything else you have tried such as code snippets.

Did you try https://wordpress.org/plugins/private-bp-pages/ – if so what was the problem?

Not sure if you are still out there, but I am trying very hard (not a coder, btw) to create a site that will allow the members control over who can see their postings, friendships etc.

I cannot figure out how to do it with buddypress. Every solution that has been offered has not actually done the trick, be it a plug in or adding code.

My site is a paid membership site – and restricted to members of a local “in person” social group.

The way buddypress is working, even with the “activity privacy” plug in installed is this:

there is a page called activity stream. It has 4 tabs in it:

all members
friends
@mentions
rss

Everytime someone joins the site, it shows up in the all members tab
everytime someone accepts a friend request, it shows up in the all members tab
everytime anyone posts any status updates, photos, or anything, it shows up in the all members tab

anyone who has a membership can view the all members tab, therefore, nothing a member does is private.

I have not tested emails, so perhaps emails are private, but so far, nothing else is.

I have tried in vain to find a way to be free of the all members tab and cannot get a solution. I am considering abandoning buddypress and trying symposium and seeing if that offers privacy.

Once the all members tab is resolved, you would also need to resolve similar issue with rss feeds, as that pumps all info out there as well, as best I can tell.

Buddypress seems to be designed as a very very public space and I fear that trying to accomplish any privacy is a losing battle.

If you find something that does work, I would appreciate knowing what it is as I am at my wits end with it.

Best of luck to you.

I see. One idea could be separating the users from different url:

paied.yourwebsite.com
free.yourwebsite.com

When a person is paying, just change it to another website and they will be able to post privately. Apart from that, I can’t think of any other way. 🙁

…can I just create those pages to satisfy BuddyPress and then just make them private?

You can. In fact, if you’re sure you’ll never need them you can perform a 301 permanent redirect to ensure they never show. For example:

function redirect_pages() {
	if ( bp_is_register_page() || bp_is_activation_page() || bp_is_members_component() ) {
		wp_redirect( home_url(), 301 );
		exit();
	}
}
add_action( 'template_redirect', 'redirect_pages' );

If for some reason you find you do in fact need the activation page, then remove || bp_is_activation_page() from the above code.

I can’t really tell for sure but reading your post it seems you have ‘private tags’ that you’re wrapping around stuff you’d like to keep private?

Maybe try wrapping these tags around the members loop bp_has_members()?