Skip to:
Content
Pages
Categories
Search
Top
Bottom

Search Results for 'spam'

Viewing 25 results - 901 through 925 (of 3,350 total)
  • Author
    Search Results
  • #174516
    modemlooper
    Moderator

    try this plugin https://gist.github.com/sillybean/3815688

    Log in with new admin and visit profile page of old admon then in admin bar there will be link to unmark

    #174508
    joyceswiss
    Participant

    I tried creating another admin, but there is no option to unmark any admins as sploggers. I guess Buddypress and Wang Guard dont work well together.

    #174507
    modemlooper
    Moderator

    create a new user in admin and change that account to admin. then logout. login with new admin account and mark your other account not a spammer in wanguard

    #174506
    Ben Hansen
    Participant

    idk whnever i have accidentally marked someone as a spammer i just un-mark using wangguard they will then show up as forced green status maybe that doesn’t unmark them in buddypress’s eyes. perhaps @jconti knows more.

    #174505
    joyceswiss
    Participant

    How do you do that? I want both Wangguaard and Buddypress, but it seems that both of them dont agree with each other ever since I accidentally marked myself as a spammer in Wangguard. Thanks so much.

    #174385

    Topic: A Guild Wars 2 guild

    in forum Showcase
    isopaha
    Participant

    Hey,

    I just finished creating the 2.0 version of my guild’s website. The earlier version was running really old wp+bp+bbp, so I wanted to create everything from the ground up.

    I had a lot of issues importing the forums and users from the old site, since I didn’t want to import thousands of spambots.

    Anyway, you can check out the forum at:
    [Deleted per request] and the whole site at the same place.

    I’m running BuddyPress + BBPress. What do you think? Site is fully responsive but I still have some graphic elements and css to fix on some resolutions. Any feedback is welcome 🙂

    EDIT: One of my biggest issues is that the Search widget is not searching anything from the forums, so I have to use some BBPress search widget, which in other hand doesnt search anything from posts. Any ideas for a fix?

    #174365
    Ben Hansen
    Participant

    did you try un-marking with wangguard using another admin?

    joyceswiss
    Participant

    Before I downloaded the plugin Wang Guard, I did not have any issues with Buddy Press. After I downloaded Wang Guard and accidentally made myself a spammer, I couldnt log in anymore to admin. I have deleted Wang Guard with my host file manager, but still the problem persist. After deactivated all plugins and activating them one by one to see what is the problem, I found out the cause is Buddy Press. However, I need Buddy Press in my site. Please advise thank you.

    Wordpress version: 3.7.1
    Buddy Press Version: the latest one cos I always update it

    #174181
    colabsadmin
    Participant

    @dennish

    Its been a few weeks and was wondering if deleting the bbpress issues in the buddypress folder is still the fix for the spambot issue you were having. Thanks!

    #173918
    Boone Gorges
    Keymaster

    There are probably a couple things happening:

    1. There is a hardcoded check to is_super_admin() in bp_core_process_spammer_status(). That check would fail during a cron job. BuddyPress should probably separate out the business logic of this function from the permissions checks. This would be appropriate for an enhancement ticket.

    2. Certain parts of BuddyPress are only loaded at some times. If you’re going to modify BP’s behavior, or use functions from BP, you need to make sure you’re waiting for BP to be loaded before doing so. It’s possible that load order works differently during cron than during regular page loads, so it’s extra important to pay attention to these rules. In short, anything that needs to hook to a BuddyPress action, or use BuddyPress functions, should be in files that are loaded at 'bp_include' or later. (See https://codex.buddypress.org/plugindev/checking-buddypress-is-active/). I’m glancing at wangguard-admin.php, and it looks like there are quite a few places where you’re attempting to do BP stuff in the main plugin file – try breaking it out into a separate, BP-specific file, which is loaded in the manner described in that link.

    If you can, you might also try turning up your error reporting level on your test installation, making sure that it’s going to your Apache error log or wp-content/debug.log. It could be that something’s happening that’s causing a non-fatal error, and your php.ini settings are too low for it to be showing up. wp-cron can be sensitive to that sort of thing.

    #173916
    Jose Conti
    Participant

    Hi,

    Since a lot of time, I want to fix a problem with WangGuard cron.

    After testing time, I opened this ticket http://buddypress.trac.wordpress.org/ticket/5229 because I discovered that bug, but the fix, don’t fix the WordPress Cron problem.

    WangGuard cron, search every x hours a new splog users, If WangGuard find them, they are marked as spam with the WordPress function

    update_user_status( $spuserID, 'spam', '1' );

    That function fire
    bp_core_mark_user_spam_admin( $user_id );
    that make all work for BuddyPress.

    Problem, if I use this function for example in WangGuard users screen, it work fine, because I’m the super admin, but cron cannot use it.

    When update_user_status call to bp_core_mark_user_spam_admin -> bp_core_process_spammer_status from WordPress cron, it is killed, so the user is marked as spam user, but the activity are not removed.

    For testing , I placed bp_core_process_spammer_status, replacing update_user_status in WangGuard cron. Nothing happens, bp_core_process_spammer_status are blocked without errors (no logs with WP_DEBUG), users are not marked as spam, no activity removed, etc

    After that, i created a new function:

    
    function wangguard_core_mark_user_spam_admin( $user_id ) {
    
    	bp_core_process_spammer_status( $user_id, 'spam' );
    }
    

    but that function I placed in the file /buddypress/bp-loader.php (as new BuddyPress function)

    After that, I rewrite again the wangGuard cron, but using this new “BuddyPress function”, the users were marked as spam, but the activity was not removed, why? because the function bp_core_process_spammer_status use other BuddyPress function that use a BuddyPress Class for clean all user activity.

    Brief:

    There is something in BuddyPress that block functions and classes that are in the “lower levels” to be used by WordPress cron.

    Has someone a solution for this problem?

    Thank you

    #173907

    In reply to: Delete Spam Users

    mattg123
    Participant

    cheers, looking at that atm the problem isn’t the sign ups now though, they seem to have stopped. The problem is deleting the ones that exist, i can’t delete them in the wp_users table because they don’t have any common attributes whereas they do in other tables.

    #173905

    In reply to: Delete Spam Users

    Ben Hansen
    Participant

    check out wangguard

    #173901
    mattg123
    Participant

    Hi,

    So I’m using buddypress on a site of mine, I’m getting quite a few spam sign ups, all have the same profile data, 3 alpha characters followed by 3 numeric characters (great I can find the spam sign ups with mysql and regexp) problem is, the data is contained in the wp_bp_xprofile_data table it has the user id, but I’m a novice, can I actually delete users somehow or will it be harder?

    Thanks

    #173864
    GigiBee1
    Participant

    Hiya,

    Apparently a number of people have signed up to be members on our network but never received their activation email. It is not ending up in the spambox and as far as I can tell it simply never goes out/they never receive it.

    I’m not a computer person and navigating these forums is a bit daunting, so apologies if I am reiterating existing/resolved topics. From what I understand however, this activation issue is a common problem that lives somewhere in the wp code and has to do with the email server. Is the only way to fix it to use a plugin? If so, any suggestions on that front? And what is the best way to deal with existing members who are inactive? Our “Unconfirmed” user list shows 8 users, whereas our active members list is at 69 versus 125 total users. What is going on?

    Also, while we’re at it, I’d love to be able to change the message that members get in the activation email. In particular, I feel it should include their login details. How do I do this?

    Many thanks!

    @mercime
    Participant

    @jconti Thank YOU for an awesome plugin and for being proactive in spam prevention for BuddyPress. Two thumbs up 🙂

    #173830
    Sergio De Falco
    Participant

    Thanks Paul, I made it :), it’s something really rough, but if somebody needs it here it is:

    <?php
    
    // parametri del database
    $db_host = "localhost";         //Your database host
    $db_user = "database";          //Your database username
    $db_password = "password";      //Your database password
    $db_name = "database_01";       //Your database name
    
    $db = mysql_connect($db_host, $db_user, $db_password);
    set_time_limit(0);
    
    if ($db == FALSE)
    die ("Connection Error.");
    
    mysql_select_db($db_name, $db)
    or die ("Database Error.");
    
    $n = 0;
    $query = "SELECT * FROM <code>wp_posts</code> WHERE post_type = 'topic' OR post_type = 'reply' ORDER BY post_date ASC";
    
    $result = mysql_query($query, $db);
    
    while ($row = mysql_fetch_array($result))
    
    	{
    		unset($user_id);
    		unset($reg);
    		unset($guid);
    		unset($id);
    		unset($post_parent);
    		unset($post_date);
    		unset($nicename);
    		unset($displayname);
    		unset($title);
    		unset($forum);
    		unset($forumurl);
    		unset($post_type);
    		unset($forum_id);
    		unset($acttype);
    	
    		$user_id = $row['post_author'];
    		$guid = $row['guid'];
    		$reg = $row['user_registered'];
    		$id = $row['ID'];
    		$post_parent = $row['post_parent'];
    		$post_date = $row['post_date'];
    		$title = $row['post_title'];
    		$content = $row['post_content'];
    		$post_type = $row['post_type'];
    		$forum_id = $post_parent;
    		
    		$q1 = "SELECT * FROM <code>wp_users</code> WHERE ID = '$user_id'";
    		$r1 = mysql_query($q1, $db);
    		$e1 = mysql_fetch_array($r1);
    		
    		$nicename = $e1['user_nicename'];
    		$displayname = $e1['display_name'];
    		
    		if ( $post_type == 'reply' ) {
    			$q1 = "SELECT * FROM <code>wp_posts</code> WHERE ID = '$post_parent'";
    			$r1 = mysql_query($q1, $db);
    			$e1 = mysql_fetch_array($r1);
    			
    			$post_parent = $e1['post_parent'];
    			$title = $e1['post_title'];
    			$guid = $e1['guid'];
    		}
    		
    		$q1 = "SELECT * FROM <code>wp_posts</code> WHERE ID = '$forum_id'";
    		$r1 = mysql_query($q1, $db);
    		$e1 = mysql_fetch_array($r1);
    		
    		$forum = $e1['post_title'];
    		$forumurl = $e1['guid'];
    
    		if ( $post_type == 'topic' ) {
    			$action = mysql_real_escape_string('<a href="http://www.yoursite.com/users/' . $nicename . '/" rel="nofollow">' . $displayname . '</a> ha iniziato la discussione <a href="' . $guid . '">' . $title . '</a> nel forum <a href="' . $forumurl . '">' . $forum . '</a>');
    			$acttype = 'bbp_topic_create';
    		} else {
    			$action = mysql_real_escape_string('<a href="http://www.yoursite.com/users/' . $nicename . '/" rel="nofollow">' . $displayname . '</a> ha risposto alla discussione <a href="' . $guid . '">' . $title . '</a> nel forum <a href="' . $forumurl . '">' . $forum . '</a>');
    			$acttype = 'bbp_reply_create';
    		}
    		
    		$content = mysql_real_escape_string( $content );
    
    		if ( $user_id > 0 ) {
    			$q1 = "SELECT COUNT(umeta_id) AS conto FROM <code>wp_usermeta</code> WHERE user_id = '$user_id' AND meta_key = 'last_activity'";
    			$r1 = mysql_query($q1, $db);
    			$e1 = mysql_fetch_array($r1);
    			
    			if ( $e1['conto'] > 0 ) {
    				$q = "UPDATE wp_usermeta SET meta_value = '$post_date' WHERE user_id = '$user_id' AND meta_key = 'last_activity'";
    				mysql_query($q, $db);
    			} else {
    				$q = "INSERT INTO <code>wp_usermeta</code> (<code>umeta_id</code>, <code>user_id</code>, <code>meta_key</code>, <code>meta_value</code> ) VALUES ( NULL, '$user_id', 'last_activity', '$post_date' );";
    				mysql_query($q, $db);
    			}
    		}
    		
    		$q = "INSERT INTO <code>wp_bp_activity</code> (<code>id</code>, <code>user_id</code>, <code>component</code>, <code>type</code>, <code>action</code>, <code>content</code>, <code>primary_link</code>, <code>item_id</code>, <code>secondary_item_id</code>, <code>date_recorded</code>, <code>hide_sitewide</code>, <code>mptt_left</code>, <code>mptt_right</code>, <code>is_spam</code> ) VALUES ";
    		$q .= "(NULL, '$user_id', 'bbpress', '$acttype', '$action', '$content', '$guid', '$id', '$post_parent', '$post_date', '0', '0', '0', '0')";
    		mysql_query($q, $db);
    
                    $n++;
    	}
    
    mysql_close($db);
    
    echo "Done! inserted $n activity entries";
    ?>
    

    The action is in italian, you can modify as you want

    Jose Conti
    Participant

    Hi,

    I’m developing the next WangGuard version, but there is a problem.

    When the WangGuard cron look for a new sploggers, if it find them, are marked as spam but the sploggers activity are not cleaned.

    First I used this

    update_user_status( $userid, 'spam', 1 );

    The users were marked as spam, but activity was not cleaned. I dont know why, but ‘make_spam_user’ are not used by ¿update_user_status?, by ¿BuddyPress when it is called from WangGuard cron?

    This function is used in other parts of WangGuard without problems. The difference is that in cron I need to add

    @include_once( ABSPATH . 'wp-admin/includes/ms.php' );

    After a lot of research without solution I used the function

    bp_core_mark_user_spam_admin($userid);

    before

    update_user_status( $userid, 'spam', 1 );

    https://github.com/joseconti/WangGuard/commit/612231c3935353d890bbaf10f977c8185dc33e04

    But with the same result, the activity are not cleaned…

    Any clue about this problem?

    Thank you

    BuddyPress 1.8.1 and trunk
    WordPress Multisite 3.6.x and 3.7.x
    WangGuard 1.5.11 Beta 5

    willandmae
    Participant

    Oh Your Right so sorry. Here is my link: http://tvbari.org So Sorry about that and Thank you for helping. Very Very Much!

    I have it in the root. No Multisite. BP1.8.1 WP3.7 and the below:

    URL: http://tvbari.heavenboundministry.com
    WordPress Version: 3.7.1
    Theme: BuddyPress Default v1.8.1
    Multisite Enabled: False
    PHP version: 5.3.27
    MySQL version: 5.5.33
    Current User Role: administrator
    Active Plugins:
    Akismet 2.5.9
    by Automattic (url)
    All in one Favicon 4.3
    by Arne Franken (url)
    Ban User By IP 1.06
    by Danilo Andreini (url)
    BAW Login/Logout menu 1.3.2
    by Juliobox (url)
    BAW Post Views Count 2.19.11
    by Juliobox (url)
    bbPress - Private Replies 1.0.9
    by Pippin Williamson and Remi Corson (url)
    bbPress - Report Content 1.0.1
    by Josh Eaton (url)
    bbpress Simple View Counts 0.1
    by jezza101 (url)
    bbPress 2.4.1
    by The bbPress Community (url)
    Better WP Security 3.5.6
    by Bit51 (url)
    Block Bad Queries (BBQ) 20130707
    by Jeff Starr (url)
    BNS Support 1.6
    by Edward Caissie (url)
    BuddyPress Group TinyChat Pro 1.2.1
    by Van dat (url)
    BP My Home 2.0
    by imath (url)
    (BuddyDev)BP Poke 1.0.1
    by Anu Sharma (url)
    BP | You Are Blocked! 1.0Beta5
    by Gabriel S Merovingi (url)
    Buddydrive 1.1.1
    by imath (url)
    BuddyPress Docs 1.5.3
    by Boone B Gorges (url)
    BuddyPress Extended Friendship Request 1.0.2
    by Brajesh Singh
    BuddyPress Groups Extras Pro - Search 1.2
    by slaFFik (url)
    BuddyPress Groups Extras 3.6.5
    by slaFFik (url)
    rtMedia for WordPress, BuddyPress and bbPress 3.2.6
    by rtCamp (url)
    BuddyPress MyMood 1.7
    by Ayush (url)
    BuddyPress 1.8.1
    by The BuddyPress Community (url)
    CalculatorPro Calculators 1.1.4
    by jgadbois (url)
    Confirm User Registration 2.1.1
    by Ralf Hortt (url)
    Events Manager 5.5.2
    by Marcus Sykes (url)
    EWWW Image Optimizer 1.7.1
    by Shane Bishop (url)
    Jetpack by WordPress.com 2.5
    by Automattic (url)
    Kitchenbug 0.6.0
    by Liquee Technologies Ltd. (url)
    Moods Addon for Ultimate TinyMCE 1.2
    by Josh Lobe (url)
    Quick Flag 2.11
    by Marko Martinović (url)
    Social Articles 1.4
    by Broobe (url)
    Stop Spammer Registrations Plugin 4.3
    by Keith P. Graham (url)
    TDLC Birthdays 0.4
    by Tom Granger (url)
    Ultimate TinyMCE PRO 9.1
    by Josh Lobe & Marventus (url)
    Visitor Maps and Who's Online 1.5.8.1
    by Mike Challis (url)
    WangGuard 1.5.10
    by WangGuard (url)
    WP Super Cache 1.4
    by Donncha O Caoimh (url)
    Yet Another Related Posts Plugin 4.0.8
    #173534
    modemlooper
    Moderator

    Spammers will find any way to get into a site, nothing new there. If you know exactly how registrations are getting through then email it in.

    #173533
    DennisH
    Participant

    I hate to break the bad news but spammers already know about it. The problem is no one here seems to care.

    Others have also reported this:

    http://wordpress.stackexchange.com/questions/113255/spammers-are-bypassing-buddypress-registration-form

    #173531
    DennisH
    Participant
    #173530
    DennisH
    Participant

    Why was this closed?:

    “Critical Exploit: Backdoor Spam Registrations via bbPress”

    I was not a problem with the config file.

    #173527
    Boone Gorges
    Keymaster

    @dennish The installation of bbPress that is packaged with BuddyPress contains a file at buddypress/bp-forums/bb-config.php. When you attempt to access the bbPress installation directly as you describe, the bbPress bootstrap loads this bb-config.php file, and sends a 403 Forbidden header to the browser. Thus, it should NOT be the case that users are able to create accounts (or do anything else) on these pages. If you are finding otherwise, it could be because your buddypress/bp-forums/bb-config.php file is missing or corrupt.

    In the future, when you find what you believe are security issues in BP, please do not post them to the forums, but instead send an email to security@wordpress.org. Thanks.

    DennisH
    Participant

    When using the bbPress plugin for forums spam bots can bypass your registration and create accounts using the template files found here: buddypress/bp-forums/bbpress

    Not only can they bypass any anti-spam features (including email conformation), their activity will not show in your normal forums. The spam posts will only show if you follow the default permalink: http://example.com/wp-content/plugins/buddypress/bp-forums/bbpress/ There you will find a vanilla install of bbPress where the spam posts live.

    Buddypress should not be used unless you delete these bbPress files. Spam bots can easily create thousands of posts/accounts per minute with nothing stopping them until your server crashes.

Viewing 25 results - 901 through 925 (of 3,350 total)
Skip to toolbar