BuddyPress.org

Thank you for this plugin @dcavins!

Didn’t know someone took the time to update the old “BP Group Hierarchy” plugin by David Dean.

Can confirm it works for me with the following setup:

WordPress - Version 6.6.2
BuddyPress - Version 14.2.1
Template Pack - Legacy

The only minor issue I’m having is that my theme doesn’t support the setting:
Replace the flat groups directory with a hierarchical directory.

This makes sense though and isn’t necessary.

Thank you for updating this. 🙂

I have the same problem. I’m also using the latest wordpress default block theme. Where can I swap template for buddypress pages? Currently it is using the default “pages” template for all buddypress pages.
How to apply another page template to buddypress?

I am amazed how few people have asked this. It should be the number 1 question.

I’m pretty sure you can set either of the roles made by WPJM when using PMP.

I use PMP to set specific roles and permissions within these roles for my members.
Eg. Coach, Support, Business and so on… And then assign the roles when needed upon signup.

You just must choose within PMP the roles that WPJM made itself (if they are legit roles recognized by WordPress – and they should be).

Snippet code has its own pros/cons if you ask me.

How do you plan on controlling this with a function – without making it super complex?
How would it know when to assign what role – depending on your needs?

I would personally just use PMP – easy to use and setup lol..

Hope you find a solution that works for you! 🙂

Hello @varunkamani

I already gave you a few options to choose from, so in the end it’s up to you.

1. Ignore error and keep plugin
Keep the plugin and accept the fact that it comes with some issues and risks.
The risk itself is pretty low when it comes to the XSS since this is pretty common.
Like mentioned before, old and unsupported plugins do come with some risk.

2. Find a different plugin
Find a different plugin that is updated that can provide you with the features you need/want.
You can search on both WordPress.Org or other sites like Google, CodeCanyon etc.

https://wordpress.org/plugins/

3. Use a third party security plugin
Download and install a third party security plugin that can help prevent the XSS attacks on your site. This could be either free or paid/premium depending on your budget and needs.

4. Get a developer to help you update current plugin
If you insist on keeping the BuddyPress Global Search and you want it updated to fix its current issues, you’d need to pay a developer to help you update the plugin itself. This might not be the best solution long term, and I would also assume BuddyBoss themselves would update this if they felt it was necessary. The fact that they talked about updating it for the past 3 years and now left it abandoned tells me that it’s not a priority for them.

From a quick search on the forums, this topic has been up several times before for the past many years, so don’t expect an easy or “free” solution for this.

Hope it helps! 🙂

I confirm the issue, it will be fixed very soon:
https://buddypress.trac.wordpress.org/ticket/9248

Personally I use the following (PRO version) – depends on what you want from your site and what your budget is. 🙂

The PRO version uses Security Headers that offers XSS Protection and other cool features too.

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

@varunkamani

This might also be worth looking into (might be worth it).

Prevent XSS Vulnerability

Trac ticket #9245 was created to resolve the reported issue.

You can achieve a vertical display of profile fields in BuddyPress by adding some custom CSS. Try this:

css
#profile-fields .field {
display: block;
margin-bottom: 15px; /* Adjust spacing as needed */
}
Add this code to your theme’s custom CSS section or the Additional CSS section in the WordPress Customizer. This should stack your profile fields vertically with some space between them.

Have you checked if your theme might have any specific settings that affect the layout of BuddyPress fields?