BuddyPress.org

I’m pretty sure you can set either of the roles made by WPJM when using PMP.

I use PMP to set specific roles and permissions within these roles for my members.
Eg. Coach, Support, Business and so on… And then assign the roles when needed upon signup.

You just must choose within PMP the roles that WPJM made itself (if they are legit roles recognized by WordPress – and they should be).

Snippet code has its own pros/cons if you ask me.

How do you plan on controlling this with a function – without making it super complex?
How would it know when to assign what role – depending on your needs?

I would personally just use PMP – easy to use and setup lol..

Hope you find a solution that works for you! 🙂

Hello @varunkamani

I already gave you a few options to choose from, so in the end it’s up to you.

1. Ignore error and keep plugin
Keep the plugin and accept the fact that it comes with some issues and risks.
The risk itself is pretty low when it comes to the XSS since this is pretty common.
Like mentioned before, old and unsupported plugins do come with some risk.

2. Find a different plugin
Find a different plugin that is updated that can provide you with the features you need/want.
You can search on both WordPress.Org or other sites like Google, CodeCanyon etc.

https://wordpress.org/plugins/

3. Use a third party security plugin
Download and install a third party security plugin that can help prevent the XSS attacks on your site. This could be either free or paid/premium depending on your budget and needs.

4. Get a developer to help you update current plugin
If you insist on keeping the BuddyPress Global Search and you want it updated to fix its current issues, you’d need to pay a developer to help you update the plugin itself. This might not be the best solution long term, and I would also assume BuddyBoss themselves would update this if they felt it was necessary. The fact that they talked about updating it for the past 3 years and now left it abandoned tells me that it’s not a priority for them.

From a quick search on the forums, this topic has been up several times before for the past many years, so don’t expect an easy or “free” solution for this.

Hope it helps! 🙂

I confirm the issue, it will be fixed very soon:
https://buddypress.trac.wordpress.org/ticket/9248

Personally I use the following (PRO version) – depends on what you want from your site and what your budget is. 🙂

The PRO version uses Security Headers that offers XSS Protection and other cool features too.

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

@varunkamani

This might also be worth looking into (might be worth it).

Prevent XSS Vulnerability

Trac ticket #9245 was created to resolve the reported issue.

You can achieve a vertical display of profile fields in BuddyPress by adding some custom CSS. Try this:

css
#profile-fields .field {
display: block;
margin-bottom: 15px; /* Adjust spacing as needed */
}
Add this code to your theme’s custom CSS section or the Additional CSS section in the WordPress Customizer. This should stack your profile fields vertically with some space between them.

Have you checked if your theme might have any specific settings that affect the layout of BuddyPress fields?

Same problem.

WordPress 6.2.2
Buddy Press 14.1.0
Theme Vikinger
PHP 8.3

If someone runs into this problem (as I did today). If calling groups_get_groups in a hook like “plugins_loaded” it is to early in the WordPress loading sequence, and gives the SQL error. I moved my hook from plugins_loaded to bp_loaded and the SQL error went away. This is logic as to ensure that BuddyPress is loaded we should use a hook that ensures it.

I still think that groups_get_group shouldn’t give an SQL error though…

// Check if the current component is 'activity'
if ( bp_is_current_component( 'activity' ) ) {
    echo "This is the BuddyPress activity page!";
} else {
    echo "This is not the BuddyPress activity page.";
}

bp_is_current_component( ‘activity’ )
This function checks if the current BuddyPress component being viewed is ‘activity’. Since BuddyPress 12 doesn’t use WordPress pages for components like activity, this is the correct way to detect if you are on the activity section.

Hi
I think cache issue Please remove Cacha and then check or you can try the BuddyX theme

BuddyX

You can try this plugin

BuddyPress Group Email Subscription

Please try changing your theme to the default WordPress theme (such as Twenty Seventeen). And see if the issue is solved or not. If the issue is solved, that means the problem comes because of the theme.

The best way, you contact the theme author and report this problem to them as only they can give a proper solution.