BuddyPress.org

Please see https://buddypress.trac.wordpress.org/ticket/6360 and associated tickets for a fix for point 1. It’s a known problem.

You install BuddyPress as a WordPress plugin so perhaps your question should be where should you install WordPress?

@aju29 – If I were you I would make a zip file backup of all your files (through cpanel or whatever) – then export your database (follow the instructions in the wordpress.org for exporting backups – (you’ll need to go into phpmyadmin -> export – advanced – check “add drop table” – export)

check your server error log to see if there is anything in there that would give a clue when you get the ““insufficient permission to view this page” error.

Check to make sure you have “pretty permalinks” set properly.

IF you deactivate all plugins, and switch to default theme, and things do not work right at that point – something is wrong.. could be your server setup, could be you forget to add the line needed for multi-site to work properly.. go back and re-trace steps..

Then I would start fresh, delete everything and install a totally fresh WP –

Of course you could do this in a different folder or something.. but you need to get wp multi-site and buddypress working with default theme before mucking it up with other plugins and themes.. once you establish that the basics work with your server and setup – then start adding the other stuff one by one to see if something breaks it.

Someone else may have an idea of what your trouble is and chime in – I don’t know your exact setup and what your exact issues are when you are trying to do what exactly – I am just another BP user, not a wp / bp dev / guru by any means.

@modx – for the moment, I would put your htaccess back to the way it was before – from what I am seeing; you are talking about login brute force password cracking being your big issue.

Although I still suggest blocking those other engine bots – you can probably do that just fine with a robots.txt file at the moment.

IF you are using a login security plugin already – you should be fine… many like to use “limit login attempts” – I use that on some sites – just change the default settings to be more strict than the 4 / attempts.. might also want to add the “whitelist limit login attempts” to keep yourself from getting locked out.

I think succuri is an excellent one too – but there are many others… these login attempt blockers will prevent a bunch of the bot attempts to break it.. recently I have found that adding the plugin “ip geo block” ( https://wordpress.org/plugins/ip-geo-block/ ) is very helpful. Again change the default settings so it also blocks access to your plugins folder and others..

Thing is, every single one of our wordpress (And therefor also buddypress) sites are getting these non-stop password attacks all day, every day. You can try things like add a “captcha” to your login form to make it harder.. but they will keep trying and tieing up your server resources..

Strange to see from your posts that all of those attacks are coming from USA based proxy servers – usually most the attacks come from Ukraine, makes me think they already got into your site once before and are willing to spend a little extra to try to re-attack.

Since those companies are us based you could write them with abuse complaints, but I don’t think you will ever stop the hacking attempts so long as you have a CMS that allows an admin login.

If you are dumping buddypress for the moment and don’t need others to get through a login prompt, I suggest adding this bit of htaccess pwd magic –
http://support.hostgator.com/articles/specialized-help/technical/wordpress/wordpress-login-brute-force-attack

Saves me servers a ton of sql requests 😉

https://wordpress.org/plugins/bp-registration-options/screenshots/

Oh here is my unanswered question with my concerns about how WP handles some of these things – if the info there helps you at all -> https://wordpress.org/support/topic/question-mark-url-return-200-not-404-string-query-noindex-or

Issue posted above has been resolved in BP Trac https://buddypress.trac.wordpress.org/ticket/6554

> Mass-deleting Buddypress groups?

@rockoria Safest way is to go to wp-admin/dashboard and click on the “Groups” link in the menu. You’ll get the updated version of what you see in the following image https://mercime.files.wordpress.com/2013/02/groups-dashboard-admin.png

This works for me
https://wordpress.org/plugins/bp-group-organizer/

Your anti spam not working use stop spam control plugin

Have you tried this:
https://codex.wordpress.org/Function_Reference/wp_signon

searching the wp-repo fro something else – and found this – https://wordpress.org/plugins/members-page-only-for-logged-in-users/

not sure if it works with current versions of things – may work – or may be helpful in finding the right code for whatever.

I think any system for preventing member view (or other page / pseudo page views) should have an optional setting to send a 403 access denied server code – may help with some things.

/random thoughts

@d_enajetic

From my limited information / understanding (as user not a dev)
“peeps that create BP” – abandoned the project long ago.

The forums here and the bp site are mostly ignored and have many problems.

There is no funding for BP anymore – and has not been for a long time.

With that being said – I was amazed to see some really awesome peeps doing a lot of work and smart discussions about so many code issues when recently visiting the bp trac system – so there is a lot going on behind the scenes. All those guys deserve a big bonus, but I am not sure if anyone is getting paid from Auttomattic for working on bp anymore.

There are several people who are monetizing a bit with paid plugins and “bp jobs”, I understand the need to get paid, and I get that there are only so many (maybe a dozen?) – Bp dev people, so providing free support in the forums here is not top of the priority list – and really many of the forums questions are not so much tech issues, but “how to” and “can I..” – which would be more easily answered by a quick bing search..

Anyhow I wish I knew more about how the activity thing chose what to pull in, and how to mod it- there are some neat newish things that BP has added to help filter the activity thing, once in a while someone will chime in with how to do it – but I have not seen any real documentation on it – another job that should be filled, yet will likely not be the top of the unpaid priority list anytime soon.

I wish wordpress would pull BP from showing up as one of the top plugins in the wp-repo and the wp dashboard- I think it is getting too many people to install it or check it out that have not business jumping into this rabbit hole, or asking about it! – lol

Let me know if any of that works our for ya, or if you find the magic “this is what bp pulls” – I am working on a plugin that converts gifs to html5 video for one of my sites, and as to where I don’t mind if those are pulled into the activity – it would be a mess if they all auto-played – so may need to do some work arounds to keep something else there in their place and a “click to see post” kind of thing like were originally talking about.