Hi – hope someone can help with this.
I have a forum website set up using bbPress. Forum members are specifically invited as it is a leadership course for selected individuals. I create their user accounts including a strong password etc and send them the details.
An issue that I’ve come across is that the participants are widely spread around the world, some of whom have limited awareness of security issues on the internet. I want to ensure that they cannot change their password to an insecure one.
I’ve got iThemes security installed on the site and have activated the strong password enforcements with a minimum level of Subscriber. All of the course participants have a primary role of subscriber, with a forum role of Participant. With the settings I have in place they should not be able to change their password to a weak one. And yet they are currently able to log in and change the password to ‘changeme’ for example.
I’ve reached out to iThemes security but nothing helpful from them yet,
Can anyone here help me to figure out how to ensure that forum users cannot change their passwords to weak ones? Is there some setting in bbPress that I’m missing? Or some workaround that others use? I can’t imagine for a minute that I’m the only one to have come across this issue, but googling has turned up a surprising lack of information about how to resolve it.
Many thanks for your help.
James Burden
Site URL: http://gcfleadership.org
WordPress version: 4.5.2
bbPress version: 2.5.9
yes this is a known issue
see
http://www.rewweb.co.uk/bbpress-wp4-fix/
and/or
http://www.rewweb.co.uk/bbpress-wp4-fix2/
there’s a trac ticket for it somewhere, but bbpress authors see it as a wordpress fix
ok, thanks – sorry it’s sometimes hard to understand the obvious until you see it !
so I’m presuming that there should be some content to that post?!
bbPress is tested with wordpress default themes. It maybe a conflict – you need to check plugins and themes
It could be a theme or plugin issue
Plugins
Deactivate all but bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.
Themes
If plugins don’t pinpoint the problem, as a test switch to a default theme such as twentyfifteen, and see if this fixes.
Also I am not sure there is a visitor WordPress role.
oops… no there isn’t – old code left on my test site !
and who gets what were just examples 🙂
I say edit Robin’s code and change
if ($role == 'subscriber' ) $new_role = 'bbp_spectator' ;
To this.
if ($role == 'subscriber' ) $new_role = 'bbp_participant' ;
And in my opinion you should not auto-assign moderators and just manually update the users roles for each of the users you trust to moderate the forums. Also I am not sure there is a visitor WordPress role.
https://codex.wordpress.org/Roles_and_Capabilities#Summary_of_Roles
bbPress is tested with wordpress default themes. It maybe a conflict – you need to check plugins and themes
It could be a theme or plugin issue
Plugins
Deactivate all but bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.
Themes
If plugins don’t pinpoint the problem, as a test switch to a default theme such as twentyfifteen, and see if this fixes.
No problem !
The core issue is with wordpress for fixing !
[I am just creating a new topic about this]
I’ve finally completed the conversion (took only 8 hours against the 2 days of the previous versions).
Nevertheless, big problem here: I can see no forum after the conversion.
I’ve been checking the database schema in which wordpress is installed and nothing….
I can only find an empty wp_bbp_converter_translator table and for the rest: no users converted, no posts, no forum and topics tables.
Does someone has any idea why this happened?
It actually looked like it was converting something and the number of interactions I’ve seen in the log during the conversion matches the actual numbers in PhpBB.
I would appreciate if someone can help.
Thanks,
Gio
Ok, I’ve finally completes the conversion (took only 8 hours against the 2 days of the previous versions).
Nevertheless, big problem here: I can see no forum after the conversion.
I’ve been checking the database schema in which wordpress is installed and nothing….
I can only find an empty wp_bbp_converter_translator table and for the rest: no users converted, no posts, no forum and topics tables.
Does someone has any idea why this happened?
It actually looked like it was converting something and the number of interactions I’ve seen in the log during the conversion matches the actual numbers in PhpBB.
I would appreciate if someone can help.
Thanks,
Gio
I ended up getting this working by ditching wpMandrill plugin and using Easy WP SMPT plugin https://wordpress.org/plugins/easy-wp-smtp/
Use a plugin like Reveal IDS.
After some more digging, I see that Mandrill is rejecting emails sent to noreply@<domain>
So perhaps this rejection is causing WordPress to send the email instead?
Not entirely sure this plugn works still, but there is this still.
https://wordpress.org/plugins/bbpress-digest/
1. Its the WordPress Toolbar, used on all WordPress sites by default.
2. This plugin adds avatar suggestions, it might not be presented easily for users, but he expains it in this video.
3. bbPress by default doesn’t have the ability to upload files, for avatars that plugin I mentioned allows avatar upload.
4. You can filter the default wordPress smilies and use custom ones, their is emoji to use because of WordPress, also there a good plugin that has a feature to import phpBB smilies call WP-Monalisa.
Wordpress: 4.5.2
bbPress: 2.5.9
Hi there,
I use the wpMandrill plugin (v1.33) to send email through Mandrill.
It works fine for Buddypress emails, and other standard WordPress emails.
However bbPress emails don’t get sent through Mandrill.
What is bbPress doing differently about how it sends email notifications?
How can I get bbPress to correctly send through Mandrill?
I’ve read a few previous topics, and they seem to indicate it’s something to do with how bbPress handles BCC, and no reply.
thx
Vanessa
Also, even after the plug in is deleted the roles (Keymaster and Participant) still appear in the user list under the “Role” column, but I thought they were only associated with bbpress. Is that correct?
This is a known bug, there is some code in the codex here to use to remove the user roles whenever you are resetting your user roles. Removing the roles and reinstalling bbPress might fix this issue, if it does not, you can use this plugin to switch to another Admin temporarily and then edit your user and switch its forum role. Make sure to edit the user by clicking the edit link by the users avatar. I think there is still an issue bulk changing a users forum role from the users list.
https://wordpress.org/plugins/user-switching/
Make sure that your default role for users are Participant in Settings > Forums. Also make sure that the default blog role for your users is Subscriber in Settings > General.
If this developer only did a short job and is done, I recommend not keeping their account as Admin/Keymaster. If they are hired for a project that is not finished or is like say doing maintenance for your site for awhile, okay keep them, but you know just be cautious since this happened to your site.
Just to be sure, make sure to check out this link for more help.
https://codex.wordpress.org/FAQ_My_site_was_hacked
Just installed bbPress on latest version of WordPress and the forum search feature does not work. When I do a search, it searches blog posts instead – actually only ever finds one blog post even if the search text does not exist. It does not search the forum.
Whats going on?
