Search Results for 'spam'
-
AuthorSearch Results
-
November 20, 2013 at 7:03 am #174535
In reply to: My account marked as spammer and I an admin
joyceswiss
ParticipantThanks, I have uploaded the plugin to wordpress. But I didnt understand what you said earlier: “Log in with new admin and visit profile page of old admon then in admin bar there will be link to unmark”
Where do i find the profile page?
November 20, 2013 at 5:25 am #174532In reply to: My account marked as spammer and I an admin
November 20, 2013 at 5:15 am #174531In reply to: My account marked as spammer and I an admin
joyceswiss
ParticipantI have downloaded it, but it is in .gz format. I tried uploading it to wordpress plugins but it failed.This page appeared when I tried:
The package could not be installed. PCLZIP_ERR_BAD_FORMAT (-10) : Unable to find End of Central Dir Record signature
November 20, 2013 at 5:07 am #174529In reply to: My account marked as spammer and I an admin
modemlooper
Moderatorclick download gist button and then upload it to WordPress
November 20, 2013 at 4:58 am #174527In reply to: 2.0 top features – ideas
Asynaptic
ParticipantI would like to offer two ideas for consideration:
1) Integrating basic anti-spam capabilities into core
2) Improving performance via fragment caching1) I realize that there are already good plugins that deal with spam, both comment and multisite blogspam. But being spam, it is a cat and mouse game and I feel that buddypress should have some basic anti-spam protection out of the box. For example, a hidden text field via css as a honeypot. Users who are not at all comfortable coding or editing files can turn this on or have it on by default (rather than try to follow guides like this: http://www.pixeljar.net/2012/09/19/eliminate-buddypress-spam-registrations/)
2) This was touched on in the recent buddypress panel discussion:
(caching: 19min – 22min)
After spam, the biggest issue that I’ve heard is with performance. I think we should start to address this. For more info and details see this thread.
One of the challenges of using caching plugins like WT3 is that they don’t work for signed in members of buddypress sites. But a fragment caching system can still cache parts of the page which are ‘static’ and would not change as a result of the user activity.
November 20, 2013 at 4:53 am #174526In reply to: My account marked as spammer and I an admin
joyceswiss
ParticipantSorry but how do I install this plugin into wordpress?
November 20, 2013 at 4:25 am #174516In reply to: My account marked as spammer and I an admin
modemlooper
Moderatortry this plugin https://gist.github.com/sillybean/3815688
Log in with new admin and visit profile page of old admon then in admin bar there will be link to unmark
November 20, 2013 at 3:27 am #174508In reply to: My account marked as spammer and I an admin
joyceswiss
ParticipantI tried creating another admin, but there is no option to unmark any admins as sploggers. I guess Buddypress and Wang Guard dont work well together.
November 20, 2013 at 3:16 am #174507In reply to: My account marked as spammer and I an admin
modemlooper
Moderatorcreate a new user in admin and change that account to admin. then logout. login with new admin account and mark your other account not a spammer in wanguard
November 20, 2013 at 3:16 am #174506In reply to: My account marked as spammer and I an admin
Ben Hansen
Participantidk whnever i have accidentally marked someone as a spammer i just un-mark using wangguard they will then show up as forced green status maybe that doesn’t unmark them in buddypress’s eyes. perhaps @jconti knows more.
November 20, 2013 at 3:01 am #174505In reply to: My account marked as spammer and I an admin
joyceswiss
ParticipantHow do you do that? I want both Wangguaard and Buddypress, but it seems that both of them dont agree with each other ever since I accidentally marked myself as a spammer in Wangguard. Thanks so much.
November 18, 2013 at 1:23 am #174365In reply to: My account marked as spammer and I an admin
Ben Hansen
Participantdid you try un-marking with wangguard using another admin?
November 13, 2013 at 1:46 pm #174181In reply to: Nothing ever changes around here….
colabsadmin
ParticipantIts been a few weeks and was wondering if deleting the bbpress issues in the buddypress folder is still the fix for the spambot issue you were having. Thanks!
November 7, 2013 at 1:56 pm #173918Boone Gorges
KeymasterThere are probably a couple things happening:
1. There is a hardcoded check to
is_super_admin()inbp_core_process_spammer_status(). That check would fail during a cron job. BuddyPress should probably separate out the business logic of this function from the permissions checks. This would be appropriate for an enhancement ticket.2. Certain parts of BuddyPress are only loaded at some times. If you’re going to modify BP’s behavior, or use functions from BP, you need to make sure you’re waiting for BP to be loaded before doing so. It’s possible that load order works differently during cron than during regular page loads, so it’s extra important to pay attention to these rules. In short, anything that needs to hook to a BuddyPress action, or use BuddyPress functions, should be in files that are loaded at
'bp_include'or later. (See https://codex.buddypress.org/plugindev/checking-buddypress-is-active/). I’m glancing at wangguard-admin.php, and it looks like there are quite a few places where you’re attempting to do BP stuff in the main plugin file – try breaking it out into a separate, BP-specific file, which is loaded in the manner described in that link.If you can, you might also try turning up your error reporting level on your test installation, making sure that it’s going to your Apache error log or wp-content/debug.log. It could be that something’s happening that’s causing a non-fatal error, and your php.ini settings are too low for it to be showing up. wp-cron can be sensitive to that sort of thing.
November 6, 2013 at 10:19 pm #173907In reply to: Delete Spam Users
mattg123
Participantcheers, looking at that atm the problem isn’t the sign ups now though, they seem to have stopped. The problem is deleting the ones that exist, i can’t delete them in the wp_users table because they don’t have any common attributes whereas they do in other tables.
November 6, 2013 at 7:25 pm #173905In reply to: Delete Spam Users
Ben Hansen
Participantcheck out wangguard
November 5, 2013 at 4:52 pm #173860@mercime
Participant@jconti Thank YOU for an awesome plugin and for being proactive in spam prevention for BuddyPress. Two thumbs up 🙂
November 5, 2013 at 11:40 am #173830In reply to: bbPress to Activity import
Sergio De Falco
ParticipantThanks Paul, I made it :), it’s something really rough, but if somebody needs it here it is:
<?php // parametri del database $db_host = "localhost"; //Your database host $db_user = "database"; //Your database username $db_password = "password"; //Your database password $db_name = "database_01"; //Your database name $db = mysql_connect($db_host, $db_user, $db_password); set_time_limit(0); if ($db == FALSE) die ("Connection Error."); mysql_select_db($db_name, $db) or die ("Database Error."); $n = 0; $query = "SELECT * FROM <code>wp_posts</code> WHERE post_type = 'topic' OR post_type = 'reply' ORDER BY post_date ASC"; $result = mysql_query($query, $db); while ($row = mysql_fetch_array($result)) { unset($user_id); unset($reg); unset($guid); unset($id); unset($post_parent); unset($post_date); unset($nicename); unset($displayname); unset($title); unset($forum); unset($forumurl); unset($post_type); unset($forum_id); unset($acttype); $user_id = $row['post_author']; $guid = $row['guid']; $reg = $row['user_registered']; $id = $row['ID']; $post_parent = $row['post_parent']; $post_date = $row['post_date']; $title = $row['post_title']; $content = $row['post_content']; $post_type = $row['post_type']; $forum_id = $post_parent; $q1 = "SELECT * FROM <code>wp_users</code> WHERE ID = '$user_id'"; $r1 = mysql_query($q1, $db); $e1 = mysql_fetch_array($r1); $nicename = $e1['user_nicename']; $displayname = $e1['display_name']; if ( $post_type == 'reply' ) { $q1 = "SELECT * FROM <code>wp_posts</code> WHERE ID = '$post_parent'"; $r1 = mysql_query($q1, $db); $e1 = mysql_fetch_array($r1); $post_parent = $e1['post_parent']; $title = $e1['post_title']; $guid = $e1['guid']; } $q1 = "SELECT * FROM <code>wp_posts</code> WHERE ID = '$forum_id'"; $r1 = mysql_query($q1, $db); $e1 = mysql_fetch_array($r1); $forum = $e1['post_title']; $forumurl = $e1['guid']; if ( $post_type == 'topic' ) { $action = mysql_real_escape_string('<a href="http://www.yoursite.com/users/' . $nicename . '/" rel="nofollow">' . $displayname . '</a> ha iniziato la discussione <a href="' . $guid . '">' . $title . '</a> nel forum <a href="' . $forumurl . '">' . $forum . '</a>'); $acttype = 'bbp_topic_create'; } else { $action = mysql_real_escape_string('<a href="http://www.yoursite.com/users/' . $nicename . '/" rel="nofollow">' . $displayname . '</a> ha risposto alla discussione <a href="' . $guid . '">' . $title . '</a> nel forum <a href="' . $forumurl . '">' . $forum . '</a>'); $acttype = 'bbp_reply_create'; } $content = mysql_real_escape_string( $content ); if ( $user_id > 0 ) { $q1 = "SELECT COUNT(umeta_id) AS conto FROM <code>wp_usermeta</code> WHERE user_id = '$user_id' AND meta_key = 'last_activity'"; $r1 = mysql_query($q1, $db); $e1 = mysql_fetch_array($r1); if ( $e1['conto'] > 0 ) { $q = "UPDATE wp_usermeta SET meta_value = '$post_date' WHERE user_id = '$user_id' AND meta_key = 'last_activity'"; mysql_query($q, $db); } else { $q = "INSERT INTO <code>wp_usermeta</code> (<code>umeta_id</code>, <code>user_id</code>, <code>meta_key</code>, <code>meta_value</code> ) VALUES ( NULL, '$user_id', 'last_activity', '$post_date' );"; mysql_query($q, $db); } } $q = "INSERT INTO <code>wp_bp_activity</code> (<code>id</code>, <code>user_id</code>, <code>component</code>, <code>type</code>, <code>action</code>, <code>content</code>, <code>primary_link</code>, <code>item_id</code>, <code>secondary_item_id</code>, <code>date_recorded</code>, <code>hide_sitewide</code>, <code>mptt_left</code>, <code>mptt_right</code>, <code>is_spam</code> ) VALUES "; $q .= "(NULL, '$user_id', 'bbpress', '$acttype', '$action', '$content', '$guid', '$id', '$post_parent', '$post_date', '0', '0', '0', '0')"; mysql_query($q, $db); $n++; } mysql_close($db); echo "Done! inserted $n activity entries"; ?>The action is in italian, you can modify as you want
November 1, 2013 at 2:35 am #173674willandmae
ParticipantOh Your Right so sorry. Here is my link: http://tvbari.org So Sorry about that and Thank you for helping. Very Very Much!
I have it in the root. No Multisite. BP1.8.1 WP3.7 and the below:
URL: http://tvbari.heavenboundministry.com WordPress Version: 3.7.1 Theme: BuddyPress Default v1.8.1 Multisite Enabled: False PHP version: 5.3.27 MySQL version: 5.5.33 Current User Role: administrator Active Plugins: Akismet 2.5.9 by Automattic (url) All in one Favicon 4.3 by Arne Franken (url) Ban User By IP 1.06 by Danilo Andreini (url) BAW Login/Logout menu 1.3.2 by Juliobox (url) BAW Post Views Count 2.19.11 by Juliobox (url) bbPress - Private Replies 1.0.9 by Pippin Williamson and Remi Corson (url) bbPress - Report Content 1.0.1 by Josh Eaton (url) bbpress Simple View Counts 0.1 by jezza101 (url) bbPress 2.4.1 by The bbPress Community (url) Better WP Security 3.5.6 by Bit51 (url) Block Bad Queries (BBQ) 20130707 by Jeff Starr (url) BNS Support 1.6 by Edward Caissie (url) BuddyPress Group TinyChat Pro 1.2.1 by Van dat (url) BP My Home 2.0 by imath (url) (BuddyDev)BP Poke 1.0.1 by Anu Sharma (url) BP | You Are Blocked! 1.0Beta5 by Gabriel S Merovingi (url) Buddydrive 1.1.1 by imath (url) BuddyPress Docs 1.5.3 by Boone B Gorges (url) BuddyPress Extended Friendship Request 1.0.2 by Brajesh Singh BuddyPress Groups Extras Pro - Search 1.2 by slaFFik (url) BuddyPress Groups Extras 3.6.5 by slaFFik (url) rtMedia for WordPress, BuddyPress and bbPress 3.2.6 by rtCamp (url) BuddyPress MyMood 1.7 by Ayush (url) BuddyPress 1.8.1 by The BuddyPress Community (url) CalculatorPro Calculators 1.1.4 by jgadbois (url) Confirm User Registration 2.1.1 by Ralf Hortt (url) Events Manager 5.5.2 by Marcus Sykes (url) EWWW Image Optimizer 1.7.1 by Shane Bishop (url) Jetpack by WordPress.com 2.5 by Automattic (url) Kitchenbug 0.6.0 by Liquee Technologies Ltd. (url) Moods Addon for Ultimate TinyMCE 1.2 by Josh Lobe (url) Quick Flag 2.11 by Marko Martinović (url) Social Articles 1.4 by Broobe (url) Stop Spammer Registrations Plugin 4.3 by Keith P. Graham (url) TDLC Birthdays 0.4 by Tom Granger (url) Ultimate TinyMCE PRO 9.1 by Josh Lobe & Marventus (url) Visitor Maps and Who's Online 1.5.8.1 by Mike Challis (url) WangGuard 1.5.10 by WangGuard (url) WP Super Cache 1.4 by Donncha O Caoimh (url) Yet Another Related Posts Plugin 4.0.8October 29, 2013 at 12:31 am #173534In reply to: Nothing ever changes around here….
modemlooper
ModeratorSpammers will find any way to get into a site, nothing new there. If you know exactly how registrations are getting through then email it in.
October 29, 2013 at 12:27 am #173533In reply to: Nothing ever changes around here….
DennisH
ParticipantI hate to break the bad news but spammers already know about it. The problem is no one here seems to care.
Others have also reported this:
October 29, 2013 at 12:21 am #173531In reply to: Nothing ever changes around here….
DennisH
ParticipantOctober 29, 2013 at 12:00 am #173527Boone Gorges
Keymaster@dennish The installation of bbPress that is packaged with BuddyPress contains a file at
buddypress/bp-forums/bb-config.php. When you attempt to access the bbPress installation directly as you describe, the bbPress bootstrap loads this bb-config.php file, and sends a 403 Forbidden header to the browser. Thus, it should NOT be the case that users are able to create accounts (or do anything else) on these pages. If you are finding otherwise, it could be because yourbuddypress/bp-forums/bb-config.phpfile is missing or corrupt.In the future, when you find what you believe are security issues in BP, please do not post them to the forums, but instead send an email to security@wordpress.org. Thanks.
October 25, 2013 at 2:21 pm #173359In reply to: accessing private groups
tperkins
ParticipantHaving the identical issue as above. Spammer registers for site, activates and then I find them in a private group. No request to join, no approval by Group Admin. The only clue I have is that when looking at their profile it says they belong to the private group but the button to the right still says “request permission”. Somehow bypassing the approval process.
October 20, 2013 at 9:52 pm #173145In reply to: phpMyAdmin user status activate members
-
AuthorSearch Results