BuddyPress.org

I had an issue with a client site that the BP team may want to look into, in the event that it is affecting more sites than just mine.

The issue: Running the latest version of BuddyPress (10.2), I had a client site and server that were seeing spikes to 100% CPU and high RAM usage — but only when a logged-in user opened the WordPress media library (/wp-admin/upload.php).

My hosting support first told me it was a plugin error, then I was told it was a theme error. But we were unable to find any evidence of this. I cloned the live site, deactivated all plugins and switched to a default WP theme, and the issue still occurred.

There were no related items in the Apache or Nginx error logs, but the PHP access log fills with lines like this, seemingly for every media file:

(server IP) – [15/Apr/2022:15:57:37 +0000] “GET /index.php?bp-attachment=13109/NorthCrawford-300×225.jpg” 301 0 – 798 14702 0.648 8388608 9.27% 3.09% “/?bp-attachment=13109/NorthCrawford-300×225.jpg”

The solution: This is what I received from my hosting support:

The issue is BuddyPress created htaccess that redirects all wp-content/uploads/bp-attachments/ to ?bp_attachments= URL. The redirects spawn heaps of apache and php-fpm which also cause the issue . They created this sample htaccess found on the directory below

The htaccess has been renamed so, when you load medias, it should no longer reach 100%

The solution was to take the .htaccess file out of the equation by renaming it, which is only a temporary fix. I presume this file would be overwritten upon the next BP update?

If that’s the case, how would I keep this from happening, aside from renaming the offending .htaccess file each time there is a BP update?

Wordpress v. 5.9.3
Buddypress v. 10.2.0
Theme. BuddyX

In Private Messages – the message body part ‘shows’ at the top that you can attach a file or a link,
the link option works, but when you click on the image attachment, it gives a popup that asks for the ‘source’ of the image. It doesn’t open a normal file explorer window to select the image.
Please, how do I FIX this?

Hi,

WordPress Version 5.9.2
Theme: MagicVersion: 1.10.0 By Bdaia
Website: miComunidad.com

When I install the BuddyPress.10.2.0 I get these errors:

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_notifications' doesn't exist]
SELECT COUNT(*) FROM wp_wkkr_bp_notifications n WHERE user_id IN (1) AND component_name IN ('xprofile','friends','messages','activity','groups','members') AND is_new = 1

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_messages_recipients' doesn't exist]
SELECT SUM(unread_count) FROM wp_wkkr_bp_messages_recipients WHERE user_id = 1 AND is_deleted = 0 AND sender_only = 0

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_friends' doesn't exist]
SELECT id FROM wp_wkkr_bp_friends WHERE (initiator_user_id = 1 OR friend_user_id = 1) ORDER BY date_created DESC

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_invitations' doesn't exist]
SELECT DISTINCT i.item_id FROM wp_wkkr_bp_invitations i WHERE user_id IN (1) AND class IN ('bp_groups_invitation_manager') AND type = 'invite' AND invite_sent = 1 AND accepted = 0

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_groups' doesn't exist]
SELECT DISTINCT g.id FROM wp_wkkr_bp_groups g WHERE g.id IN (0) ORDER BY g.date_created DESC

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_groups' doesn't exist]
SELECT COUNT(DISTINCT g.id) FROM wp_wkkr_bp_groups g WHERE g.id IN (0)

WordPress database error: [Table 'micomuni_wpcristiana.wp_wkkr_bp_notifications' doesn't exist]
SELECT id, user_id, item_id, secondary_item_id, component_name, component_action, date_notified, is_new, COUNT(id) as total_count FROM wp_wkkr_bp_notifications n WHERE user_id IN (1) AND component_name IN ('xprofile','friends','messages','activity','groups','members') AND is_new = 1 GROUP BY user_id, component_name, component_action ORDER BY date_notified desc

How do I create these database tables? Please help?

Thanks,

Carlos

Wordpress: 5.8.3
BuddyPress: 10.1.0
URL: https://learn.rebeccagordonastrology.com/

Why can’t a user that has access to a hidden group not be able to see that group on the groups page?

Thank you for your help.

Hello friends,

i’m creating a wide social with Buddypress.

Having already considered all the security measures regarding wordpress (first of all registration), which are the way or best practices to avoid maliciuos code injected via publishing a post by a member (that is not manual approval of any commment of course)?

Example: dedicated plug-in, limitation of some symbol as “bad word” (i have plugin) or others.

Many thanks,

Giuseppe