BuddyPress.org

Yes, I’ve seen many solutions that do just that. Try searching the Plugin Directory. If you have no luck, try searching these forums for a custom code snippet that’ll do the job for you.

Hi,

As mentionned on official plugin page, this plugin is a Beautiful WordPress User Profile and Instant Community Plugin.

In other word, an alternative to BP for WP sites users. You use the one or the other, but not both !

If you have issues with that plugin, you have to contact the author.

Note also that this plugin is not in WP’s plugin repo.

Hi @thesmartone,

I even changed wp_config.php, variable WPLANG
This is no more necessary since WP 4.0

If your WP is in portugese, BP should be in same language automatically (except if you deactivated this feature)

BP translation can be found on GlotPress. pt_BR is translated to 96% (see here)
The po/mo files goes to wp-content/languages/plugins/buddypress-pt_BR.mo

Your comment is awaiting moderation, is a default WP string. In many cases, it can also be in theme. To ensure this, activate 2013 or 2015 and test all translations for WP and BP.
Deactivate all other plugins while doing this.

And before claiming about buggypress, check for PBCK. Or better, read the doc before installing something. 😉

You’re talking about the value of $this in the filter call in class BP_Legacy extends BP_Theme_Compat ?
add_filter( 'bp_get_activity_action_pre_meta', array( $this, 'secondary_avatars' ), 10, 2 );

Good question.
And I’d be interested in the answer.

There must be a simple way to disable secondary avatars…
You might want to ask about this on Slack.

Meanwhile, this works, not very efficient ‘tho.
Hook is in bp-activity\bp-activity-template.php

function remove_secondary_avatar( $item_id ){
	
	$item_id = '';
	
	return $item_id;
}
add_filter( 'bp_get_activity_secondary_avatar_item_id', 'remove_secondary_avatar' );

And this works, but I don’t know why :<

function remove_activity_secondary_avatars( $action, $activity ) {
    
    if ( $activity->component = NULL ) {
	// don't do anything
    }

    return $action;
}
add_filter( 'bp_get_activity_action_pre_meta', 'remove_activity_secondary_avatars', 10, 2 );

@oliver_rub,

all i could say is that is an old request, even if confidential.
See this ticket opened 4 years ago
and this bbpress ticket kicked to 2.7 as idea. And why not 6.0 ? 😉

Supposing that if more people would ask, it will be resolved faster.

Aside, the gist given by imath need to be completed to work with BP 2.3.2.1 on text Tab (only) by adding
bp_is_group to if ( function_exists( 'bbpress' ) && is_bbpress() || bp_is_group() )

And to enable visual editor, no need of a plugin. See here.

The W3C validator is saying you can’t have an empty form action attribute. So instead of:

<form action=""

you will need to provide a value like this:

<form action="some-script.php"

You could open a ticket on Trac or alternatively you could solve the problem by providing a value yourself. Check out the BuddyPress Template Hierarchy article for details on how to override templates.

@nithin270 @dineshravajani07 – Please help us debug bp_verify_nonce_request():
https://buddypress.trac.wordpress.org/browser/tags/2.3.1/src/bp-core/bp-core-functions.php#L2005

Judging by what you are doing, it appears that function is returning false.

Can you debug that function and find out whereabouts the function is failing for you?

Are your sites behind a reverse proxy?

With standard buddypress (no modifications) you can freely view anyone’s messages without even logging in. Personally I think that is not very good security/privacy, whatever you want to call it.

I made a ticket as I don’t think that “private messages” should be publicly viewable
(https://buddypress.trac.wordpress.org/ticket/6504#ticket)

What privacy/security checks would you recommend for people who don’t want users private data publicly viewable?

Also, to answer your question:

How would you do the security check?

These must be done server side. You’re right to think that anything done via the client can be tainted (manipulated by an end user).

The general process is:

• Make an AJAX call passing any client-side data to the server
• Process the data (secure it and perform necessary privacy checks) and then send a response
• Do something client-side with that response

For more info on AJAX and WordPress, check out the AJAX in Plugins article.