Skip to:

BuddyPress Widget still shows private recent topics to all users



    Dear BP-Communnity,

    even with the current Version of Buddypress (1.7.2) and bbPress 2.3.2. I have a problem that was supposed to be fixed: The Buddypress widget that shows recent topics in the sidebar also reveals posts from private forums thereby giving away what is supposed to be secret.

    I am using WordPress 3.5.1. I did install it a subdirectory. But in respect to the the web adress the relative path at the directory is ./
    Before and after the recent update from BP 1.7.1 to BP 1.7.2 the problem occured equally.

    Installed and activated Plugins: Akismet, bbPress, Better WP Security, BP Message Attachment, GD bbPress Attachments, Google Calendar Events, Members, Private content, Tapatalk, WP Google Fonts, WP User Avatar, Yop Poll
    I am using the theme “From Dusk till Dawn”
    I did not modify the core files and did not have own custom functions in bp-custom.php
    My bbPressVersion is Version 2.3.2
    Right now i can’t provide error logs from the server but can provide them late on.
    My hoster is 1&1. The server runs some brand of Linux.

Viewing 2 replies - 1 through 2 (of 2 total)



    Meanwhile I did find, that user/template-tags.php did have a known issue. But patching that did not change behaviour at a specific way to reproduce the problem:

    User X is member of group A, but not group B. Both groups do have hidden forums. Both Forums are in a hidden Category “Gruppenforen” (German for group forums).
    When User X goes to the forum of group A and then follows the link in the group to “Gruppenforen” and onlky at that moment the widget for recent topics shows all topics in “Gruppenforen” includigts those of group B, that user X is not supposed to see.



    Also in case of a visible category “Gruppenforen” the behaviour is identical.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘BuddyPress Widget still shows private recent topics to all users’ is closed to new replies.
Skip to toolbar