Hi,
My name is André and I’m running into some issues I hope some of you can solve. Good to know is that links to mentioned pages are at the bottom of this post.
The Issues
When I create a bbpress forum, the forum index won’t display on the default page I created ( /forums/ ) but displays a blank page.
The forum index will display on any other different page like this one /forums-2/
When I visit a test forum I get a blank page again.
So I thought I would create a new forum slug in bbpress and page accordingly, named guitar-forums as I was sure no other plugin will have claimed that url. But here the same issues. Nothing works on /guitar-forums/ but the index does show on /guitar-forums-2/
What I’ve done first
I have had previously installed asgaros forum but have removed the plugin and removed the asgaros data tables from the database. I also deleted the old forums page and emptied the trash.
I then did:
switching to default twenty x theme
purged all cache incl server side caching
disabling all other plugins
reset bbpress
Links
Default website forum index link: https://vpbex8y4m8.onrocket.site/forums/
Forum index on a different page: https://vpbex8y4m8.onrocket.site/forums-2/
Forum link: https://vpbex8y4m8.onrocket.site/forums/forum/test-forum/
Other Info
Theme: spectra one
wordpress version 6.4.2
bbpress version 2.6.9
so if you install the ‘check and log email’ plugin and set up logging, you can see if they are being sent
Check & Log Email
I’ve done a bit more investigation
It looks like this code is only used if you have passwords that are not to the WordPress encryption, which would usually be after you have done an conversion to bbpress from a previous forum.
Is this the case?
I’d suspect that you tried posting more links than you have set as permitted.
go to
dashboard>settings>discussion>comment moderation and check for the settings that apply to your site
You should also consider installing as well :
bbp style pack
once activated go to
dashboard>settings>bbp style pack>Moderation
which will let you control moderation better, and the plugin has lots of other useful settings
Just retested and that still works on my test site.
I’ve not used sass, so unsure how it might affect that.
so 2 things I would try first
Firstly, see if the changes appear on a computer that has never seen that site before – browsers often keep local copies of files and don’t always spot chnages.
Secondly try a change you have made in the custom css part of your theme and see if that works.
If you are at the start of styling the forums, you might want to look at
bbp style pack
which has an easy interface to making styling changes, along with a ton of features to make your forum look and work better.
Hello,
after we switched ton PHP 8.2 we get the Message:
“There was a critical error on your website. Please check the inbox of your website administrator email address for further instructions.
Learn more about troubleshooting in WordPress.”
WordPress-Version 6.4.2
Aktuelles Plugin: bbPress (Version 2.6.9)
PHP-Version 8.1.27
web/wp-content/plugins/bbpress/includes/admin/classes/class-bbp-converter-db.php verursacht. Fehlermeldung: Uncaught TypeError: register_shutdown_function(): Argument #1 ($callback) must be a valid callback, class BBP_Converter_DB does not have a method “__destruct”
Can someone help me, please.
Wordpress 6.4.2
Theme Bam 1.3.0 (https://wordpress.org/themes/bam/)
bbPress 2.6.9
I copied the default bbpress.css file from wp-content/plugins/bbpress/template/default/css/
and installed it in wp-content/themes/bam/css/bbpress.css
I had to make the css folder as it didn’t exist in the theme. No matter what I do it seems bbPress doesn’t look at that css file.
The only way I could make it work was to add all the css from the bbpress.css file to the theme css file found at wp-content/themes/bam/style.css – which isn’t what I want because it will break on the next theme update. I did notice the theme uses sass so that could be a conflict?
Unsure why this won’t work otherwise.
ok, for others reading this, it is an additional plugin
BP Classic
It is just a deprecation warning – meaning that in some future release of php it will not work. You can safely ignore it.
I am just a moderator here, and not a bbpress author.
The authors tend to release updates every few years, rather than more frequently.
If you want to get rid of it, then add
bbp style pack
which has an automatic fix for it.
I’m running BBPress on wordpress 6.4.2 and PHP 8.3 and I’ve been getting the following deprecation warning:
PHP Deprecated: Creation of dynamic property BBP_Admin::$forums is deprecated in /home/peq42/www/wp-content/plugins/bbpress/includes/admin/forums.php on line 793
if possible, I’d like the devs to look into it
Thanks.
Whilst I am not a bbpress author, adding fixes for themes which do not work with bbpress would require adding code for 200,000 bbpress users of whom only very small proportion use Hello Elementor, and then supporting this against any changes that Elementor do. There are other themes that also don’t work with bbpress and doing this for all these could add a mountain of work.
But yes, I’m glad to add the link to this thread to help others
Hello Elementor bbPress fix
I will also be adding support for this into my style pack plugin in the new year
bbp style pack
Thanks.
Whilst I am not a bbpress author, adding fixes for themes which do not work with bbpress would require adding code for 200,000 bbpress users of whom only very small proportion use Hello Elementor, and then supporting this against any changes that Elementor do. There are other themes that also don’t work with bbpress and doing this for all these could add a mountain of work.
But yes, I’m glad to add the link to this thread to help others
Hello Elementor bbPress fix
I will also be adding support for this into my style pack plugin in the new year
bbp style pack
I am just a moderator here, and not a bbpress author.
The authors tend to release updates every few years, rather than more frequently.
My personal view is that you should consider bbpress to be a ‘mature’ product, ie any releases will be to fix issues rather than add functionality.
bbpress is written really well, and has loads of hooks. There are no show stopper bugs in it, it may throw a few deprecation notices (and these are very few at the moment), but WordPress recommends that you should not show error messages in live sites.
I currently have my test site running WordPress 6.4.x and php 8.2 with no issues.
The only major issue with bbpress at the moment is that it does not work well with FSE themes.
However my bbp style pack plugin has fixes for this
bbp style pack
as well as block versions of the widgets and a ton of styling and functionality add-ons.
All plugins are subject to the authors commitment, and bbpress is no different.
The main WordPress support forums use bbpress, and it would be mega work to move those over to some other product.
The Wordfence warning is one that is automatically pumped out when a plugin reaches certain parameters. I love Wordfence and use it on all my sites, but these ‘catch all’ warnings can alarm people when they do not need to.
But with open software you make your choices….
Thank you @robin-w for your kind answer. I appreciate your time to look into this question and your diligence in answering people’s questions. It seemed this topic went in a different direction than I was expecting/asking, but perhaps I’m misunderstanding everyone’s answers? According to the security plugin WordFence documentation on their knowledge base it says the issue with bbPress is:
Plugin appears to be abandoned
This scan result means that a plugin has not been updated in 2 years or more. This can be a problem because it means that the plugin author has not made any changes for a long period of time. Sometimes that means it will not be fully compatible with newer WordPress versions, reported bugs may not be fixed, and new security issues might not be addressed.
The scan result also shows if this plugin has a known security issue that has not been fixed. If that is the case, it is recommended that you remove the plugin as soon as possible, and replace it with a different plugin if you need the same functionality.
There are two types of alerts for abandoned plugins, “Medium” and “Critical”. An abandoned plugin will generate a Medium alert. If the plugin also has unpatched security vulnerabilities, the scan result will be Critical. Plugins that are abandoned should be evaluated in terms of what risk they may pose. Unless you know that the code in the plugin is safe, you should start looking for a replacement. Plugins with unpatched vulnerabilities should always be removed.
When I read this guideline from WordFence and look at the bbPress website, as well as reading what WordPress says about it and what information about bbPRess displays inside my dashboard of the install, I’m not certain which instruction to follow. Should I consider it abandoned? Well, someone came here and answered my question named moderator and other people also visited this thread and commented who seemed to assume my question was a PHP compatibility question (i don’t know, is my question a PHP compatibility issue i’ve yet to discover?) so if people are actively reading a support thread that’s not “abandoned” in the sense people are here interacting still. But abandoned where coders who are behind the coding of bbPress watching developments and using the best security practices and applying them? I’m not certain and am not sure how to decide that info without posting again to ask. As a non-coding person I have no way of knowing without asking.
Is bbPress still in development, being monitored and updated by careful coders who look over it, or is the core code maintenance abandoned with some core enthusiasts who are still using it here interacting but not coders who know what’s what in the code? Unfortunately, I don’t read code. I am not a coder. So i have no way of knowing.
Thanks
I’m not sure that these would be causing false registrations, as bbpress just uses the wordpress registration system.
bbp manage subscriptions has been withdrawn
bbpress toolkit should not be used as it was closed due to a security issue
bbpress unread posts is also no longer maintained
the key features of all 3 are now in
bbp style pack
@lmstearn: Thanks for that info on the php code.
Here’s some info I found previously on this error (but you probably already knew this).
The ‘Are you sure you want to do this? ‘ error usually appears when nonce verification fails, and the most likely candidates for causing this error are plugins and themes not using this feature properly. Nonces are unique keys that add a security layer to protect WordPress URLs, forms, and Ajax calls from abuse.
https://www.google.com/search?q=are+you+sure+you+want+to+do+that+error+wordpress
that shortcode is from bbp-style-pack plugin and should read
[bsp-display-topic-index show='5' forum ='10,11,12']
note bsp-display… not bbp-display…
bbp style pack
for details, go to
dashboard>settings>bbp style pack>shortcodes
@artmuns: Totally acknowledge the user problem with expired pages causing this over here, and certainly copying the post-text is the first line of defence, just curious as to what it was in the superseded code that cached the text.
Maybe the following,
add_filter( 'bbp_verify_nonce_request_url', 'my_bbp_verify_nonce_request_url', 999, 1 );
function my_bbp_verify_nonce_request_url( $requested_url )
{
return 'your_URI' . $_SERVER['REQUEST_URI'];
}
Now the functions.php has been dropped from Twenty Twenty Two and onwards, so might not be possible in the theme, could be a separate plugin, or a request for a cache module.
For caching, use LiteSpeed over here, just added into the ESI Cache section these:
bbp_verify_nonce_request
wp_verify_nonce
Not sure if they are correct, will post back if not. 🙂
We’ve run into the following issue on our site.
Whenever a new Free Member registers, they should get a custom role called Free Membership Plan. However, bbPress overrides this somehow and the role they receive is Participant. This happens even if we choose not to have all new members added to the Participant role.
On our site, we use Paid Memberships Pro which manages user levels (who gets access to what content), so in addition to WordPress’ site roles, we have user levels and bbPress’ forum roles.
We have deactivated bbPress and the issue went away. However, we would love to keep using bbPress as our Forum software.
Would anyone be willing to help us out here?
Thanks,
Steve
bbpress just uses WordPress login, so it is that area that needs researching.
WordPress uses login cookies, so if your browser does not have cookies enabled then it would not remember you.
Given that it works on some of your browsers but not others, then it would tend to indicate a browser issue rather than website.
you could also look at
https://stackoverflow.com/questions/52879240/remember-me-functionality-doesnt-work-properly-in-wordpress
great – what were you wanting your dev to do?
you might find this useful if you are not already using it
bbp style pack
@mike80222 writes a really good response.
bbpress is used on the support site of WordPress itself – ie it is what almost all the themes and plugins have as their support tool, eg
https://wordpress.org/support/plugin/gutenberg/
and
https://wordpress.org/support/forum/how-to-and-troubleshooting/
that last one has 23,000 pages of 30 topics so to say wp is not good for forums and that it would clog your server is maybe not accurate.
bbpress is used on 200,000 wordpress sites, including this one.
All plugins and themes have the potential be be unsecure. Indeed as I write this, the Elementor plugin which is installed on almost 9 million sites has a vulnerability which has just been fixed.
If you really want to secure your site then as Mike says, install the Wordfence plugin, it is really worth it. The free version will gets you lots, but if your site is more commercial and not a say a poetry writing forum, then paying $119 for the professional version is well worth it. You get same day protection from issues found by an army of bug hunters.
Hi @rvpodcast,
I’m not a WordPress, bbPress, or security expert — but I’ve been using bbPress for forums on a couple of different sites for almost 5 years now. I’m not aware of any current or recent security issues with bbPress itself. WordPress has had a number of them. I suggest looking at one of the several available “vulnerability” databases WRT this kind of thing. I mostly use Wordfence (and I also use their security plugin on all my WordPress sites).
For what it’s worth, my most active site has about 500 users. So I don’t have any experience with a really high-volume site.
It is definitely important to take some time making this decision, because once you choose your forum software, it’s not going to be easy to switch!
Hope that helps.
Mike
I’ve just spent a lot of time making a great bbPress forum. When I went to ask my WordPress developer for some assistance, he said that bbPress was way too vulnerable to hackers, would clog my server, and that he didn’t want to work on it. He says WP is not good for forums. I do expect the forum to be busy with users but from what I can see, the security and hacker issues seem to be from several years ago. I love the forum I have set up on bbPress but my developer has me spooked. Has bbPress gotten rid of most of those previous issues?
I run:
Wordpress 6.4.2
bbpress 2.6.9
bbPress WP Tweaks 1.4.4
When I remove the shortcode for the single forum. The images work again.
