[@robin-w Moderator 5 years ago]

would need a link to an example on your site

[@robin-w Moderator 5 years ago]

great – glad you are fixed

[@robin-w Moderator 5 years ago]

easiest way is to use

bbPress Notify (No Spam)

[@robin-w Moderator 5 years ago]

bbp_get_topic_forum_id( $topic_id) ;

[@robin-w Moderator 5 years ago]

put this in the custom css part of your theme

blockquote {
	color: blue;
}

[@robin-w Moderator 5 years ago]

bbpress just uses WordPress login, so you just need a plugin or code that does that for WordPress

there are several and I have not tried any, but

Home

or if you are into coding

How to Share Logins and Users Between Multiple WordPress Sites

[@robin-w Moderator 5 years ago]

forums can have multiple groups with the same or different permissions.

so maybe

dashboard>settings>bbp private groups>group name settings create a group called admins
then in
dashboard>settings>bbp private groups>assign groups to roles
assign admins group to the administrator role
then for each forum
Go into it and set the admin forum group you set up, and click save
then you will see topic permissions and be able to set this group to say be able to create/edit topics and replies (and view all topics/replies)

so admins can create topics and replies, but subscribers can only post replies.

[@robin-w Moderator 5 years ago]

you will need

Private groups

so once installed create a group called whatever you like

dashboard>settings>bbp private groups>group name settings
then in
dashboard>settings>bbp private groups>assign groups to roles
set subscribers to get the group above
then in
dashboard>settings>bbp private groups>topic permissions
set this to active
Finally for each forum, go into it and set the forum group you set up, and click save
then you will see topic permissions and be able to set this group to only create/edit replies

then all subscribers will only be able to create/edit replies

[@robin-w Moderator 5 years ago]

🙂

[@robin-w Moderator 5 years ago]

this is one of the good and bad things about WordPress plugins.

It is good that they warn you that plugins have not been updated for a long period.

It is bad that it puts people off using perfectly good plugins because the author has had the goodness to release for free useful code to the world, but does not have the time or wish to be involved in supporting it.

But a well written plugin rarely needs changing if it does all that is required.

And since moderation tools hooks to bbpress functions that are long standing and stable, there are no issues I know with this plugin and I suspect it will work for years to come. If it breaks though minor issues, I’d clone it and re-issue.

You can sort of consider the warning a bit like a warranty. You don’t stop using the dishwasher because the year long warranty has run out, you just accept that maybe one day in the future it will stop working. When it does, then you may need to stop using it, but you do not go back to hand washing your dishes just because the warranty has run out on the dishwasher 🙂

If moderation tools stops working, you are no worse off than now. so if you use it for a while and it makes life easier, then that is a bonus.

[@robin-w Moderator 5 years ago]

great

[@robin-w Moderator 5 years ago]

dashboard>users>all users and find the user using search.

then click edit to edit the user.

in the url at the top of the page you will see

mysite.com/wp-admin/user-edit.php?user_id=1332&wp_http_referer=%2Fwp-admin%2Fusers.php

1332 is the user id

[@robin-w Moderator 5 years ago]

no problem, glad to have helped

[@robin-w Moderator 5 years ago]

if you are using code snippets, then JUST the code below (not the “wp-content/theme” etc – do NOT add that) , and use this code as it has the correct apostrophies in it

add_filter( 'get_the_archive_title', 'to_archive_title_remove_prefix' );
function to_archive_title_remove_prefix( $title ) {
if ( is_post_type_archive() ) {
$title = post_type_archive_title( '', false );
}
return $title;
}

[@robin-w Moderator 5 years ago]

it is REALLY hard to get a computer to distinguish between real stuff and spam.

This support site uses askimet, but 3-5 spam posts get through each day. many just copy content and add their own url.

my strategy is

1. spam will get through, so unless your bbpress is massively used I use https://wordpress.org/plugins/bbpress-notify-nospam/ to notify me of each post and reply. I can quickly look at it, and if needed delete.
2. I also use https://en-gb.wordpress.org/plugins/moderation-tools-for-bbpress/ that way the topic or reply does not ‘disappear’ the author sees it as pending, and you get an email so you know to take action.

[@robin-w Moderator 5 years ago]

70% in internet sites worldwide are WordPress ! Every hacker in the world knows how to identify a WordPress site. Probably 90% of sites don’t change the login url, so is this a risk?

The answer is not really.

Every site has to have a login screen, and that is visible to a hacker. If a hacker guesses an ordinary user, then all they get is an ordinary users access, so at worst they can create a post in someone else’s name.

What they are after is the admin user and their password. Then they can install plugins that add files to the site that can be used to say create a sub site that looks like a bank and try and get info from email links. You will have received scam emails with links to dodgy sites where this has been done.

The majority of site owners leave their username as admin, so hackers try and guess passwords based on the site name – so for say the French Horse Society website (if it existed) you might try admin with a password of FHS123 or french01 etc.

In other words they try and guess passwords for sites owners who have set themselves a password they can remember.

If you use a WordPress generated password, then there is no chance that a hacker will guess this or realistically can use software to break the site.

Now hackers use computers to find and target sites – they don’t sit at screens and look at websites.

So if you change your login url, then the ‘robots’ won’t see it, and chances are that they will just move on to another site, rather than search your site for a page that has login on it, but they can do this, so changing the url doesn’t stop this, it just means that you make yourself a lesser target. So it’s a good idea, but not a failsafe

Much more critically you need to have a WordPress generated password for your admins.

I’d also suggest that you look to install the wordfence plugin. This stops multiple attempts to guess password on your site, as well as a load of other security stuff. the free version is fine, and you will get lots of emails from wordfence and some that pester you to upgrade, but it is a great plugin.

Wordfence Security – Firewall & Malware Scan

last of all – don’t get obsessed by this – you website is for you and others to enjoy. Owning a diamond is lovely unless you spend your whole life worried about whether it will get stolen !

[@robin-w Moderator 5 years ago]

no problem !

[@robin-w Moderator 5 years ago]

not quite sure what you want or whether I am mis-understanding?

People need to be able to login, and for that they need a login url, and that will be your altered login url. How else can they log in?

[@robin-w Moderator 5 years ago]

bbpress just uses WordPress registration and login.

bbpress then just assigns the default role on first login that is set in Dashboard>settings>forum>roles if you have that ticked, or you can manually assign if you wish.

Therefore you can ignore anything bbpressy on registration and login, and just use anything that WordPress does instead.

This gives you the ability to utilise plugins such as ‘theme my login’ to give yourself a nice registration and login (there are plenty of other good login plugins, just search around).

It looks like you have already changed the default wp urls – which is great and good security practise, so suggest you just don’t use bbpress login shortcodes or widgets, and let wordpress do your registration and login.

Do come back if you need further help

[@robin-w Moderator 5 years ago]

Put this in your child theme’s function file –

ie wp-content/themes/%your-theme-name%/functions.php

where %your-theme-name% is the name of your theme

or use

Code Snippets

[@robin-w Moderator 5 years ago]

great – glad you are fixed

[@robin-w Moderator 5 years ago]

@kriskl – thanks I’ll make a note that wp rocket is bbpress friendly 🙂

[@robin-w Moderator 5 years ago]

This support site has 100,000 topics. How many topics and how much slower is your site ?

[@robin-w Moderator 5 years ago]

🙂

[@robin-w Moderator 5 years ago]

great – really pleased that we got there – it was nagging me that I couldn’t do it so I took another look – glad you are fixed !!