Search Results for 'profile fields'
-
Search Results
-
hey all:
been setting up a client using wp3.0.1 and bp 1.2.5, and doing a little testing and i noted that if you created a textbox xprofile field (say to collect zipcode) and put something in it like:
(script)bad stuff here;(/script)
–obviously using brackets, tho — the database would, lo and behold, not sanitize the input.really.
altho, in fairness, addslashes was added but script tags passed thru to the database, and the output was properly sanitized. that is, when you viewed someone’s profile, the xprofile field wouldnt show the script tags, just what was in between. however, i’m sure you agree, there is verrry few reasons for keeping literal script tags in the database store of user input — in fact i can’t think of one.
for proof: see db screenshot at http://mariochampion.com/images/xprofile_data_table.png or just give it a try yourself.
so, after some digging i found the where the xprofile fields are manipulated and added a little function to the bottom of my functions.php in plugins/buddypress/bp-themes/bp-default/functions.php to call wp_filter_kses() on the field value
if you are inclined:
http://pastebin.com/GaYZTCq9just thought i’d give back a little.
adios
marioHey, I’ve been doing some final testing and I realized that custom profile fields allow a lot of characters including ‘, do you know anyway I can sanitize this? thanks!
Topic: Allow Users to add fields
I’m building a buddypress looking like LinkedIn, but i need to make users able to add more than one professional experience.
For now, i made a profile field called “Experience”, where there is some info to fill in….but how could i do to let the user add more than the existing fields.Topic: Problem with Profile Field.
Hi, i just started configurating BP for my project but i have a little issue.
I created profile information fields for users:Name
Location
Date of Birth
ActivityThe three first ones works perfectly (textfields) but the last one won’t work.
I selected a multi-checkbox type, it appears in the profile but when i go in the profile to set it up, when i save it, it will not update…any clues?
Thanks to all of those who will read and a huge thank you for those who will answer.
This has me stumped.
I have an age profile question in my BP base profile fields set up in increments like ’16-25′, ’26-30′ and so on.
A user selects an age group on sign up and it displays in their profile no problem yet when clicking on that age group to do a search, it always returns no results.Anyone know why this is.
I can click on other profile fields I have created and they bring back search results of other members with the same criteria but not the age one. I expect it must be the way it is written or something? Maybe as it has a ‘-‘ in it perhaps?Hi guys. Is it possible to create more information fields for groups?
For example, also the location or something else.
At the best it should be similar to the field adding for the user profile.Thx a lot for the help!
deMischaI want to display Twitter and Linked in icons in member profiles as hyperlinks to the specified page on those sites. I have no problem adding custom fields to display the Twitter handle as hyperlink and LinkedIn URL as hyperlink, but what about displaying the icons themselves as hyperlinks based on the data the user submitted in the profile custom field? Possible?
Topic: Databse errors!
I have wordpress 3.0.1, and only a handful of otehr plugins (none of which should be an issue. I install the plugin, and activeate it, then get :
WordPress database error: [Table ‘xdatabase.wp_bp_xprofile_data’ doesn’t exist]
SELECT value FROM wp_bp_xprofile_data WHERE field_id = 1 AND user_id = 1WordPress database error: [Table ‘xdatabase.wp_bp_xprofile_fields’ doesn’t exist]
SELECT * FROM wp_bp_xprofile_fields WHERE id = 1WordPress database error: [Table ‘xdatabase.wp_bp_xprofile_fields’ doesn’t exist]
SELECT id FROM wp_bp_xprofile_fields WHERE id = 1WordPress database error: [Table ‘xdatabase.wp_bp_groups_members’ doesn’t exist]
SELECT COUNT(DISTINCT m.group_id) FROM wp_bp_groups_members m, wp_bp_groups g WHERE m.group_id = g.id AND m.user_id = 1 AND m.is_confirmed = 1 AND m.is_banned = 0WordPress database error: [Table ‘xdatabase.wp_bp_messages_recipients’ doesn’t exist]
SELECT unread_count FROM wp_bp_messages_recipients WHERE user_id = 1 AND is_deleted = 0 AND sender_only = 0WordPress database error: [Table ‘xdatabase.wp_bp_xprofile_groups’ doesn’t exist]
SELECT id FROM wp_bp_xprofile_groups WHERE id = 1WordPress database error: [Table ‘xdatabase.wp_bp_xprofile_fields’ doesn’t exist]
SELECT id FROM wp_bp_xprofile_fields WHERE id = 1WTF? I knwo for certain that the sql databse was clean of BP stuff before i ran the install, there should be nothing to clash.
Any ideaS?
BTW, it says it activated successfully and i can use it ok, which is a little worrying
I am trying to display custom profile fields within the group members loop (bp_group_has_members()), and have tried 2 different template tags that I found in other forum threads, but neither returns any data.
Here are the two modes I’ve tried:
xprofile_get_field_data( ‘Email’ ); where ‘Email’ is the name of the field on the form
bp_member_profile_data( ‘field_5’); where ‘field_5’ is the field’s ID
Does anyone know what I’m doing wrong? Or how to solve this problem?
You have to ask 1000 and 1 times!
You have to modify the profile loop (/members/single/profile/profile-loop.php)
Change this line:
while ( bp_profile_fields() ) : bp_the_profile_field();to:
while ( bp_profile_fields() ) : bp_the_profile_field(); if ( bp_get_the_profile_field_id() != 'ID # YOU WANT TO SKIP' ) :then change the corresponding endwhile; line to:
endif; endwhile;—
That’s one way of doing it.
no answer 
