[Robin W]

it is REALLY hard to get a computer to distinguish between real stuff and spam.

This support site uses askimet, but 3-5 spam posts get through each day. many just copy content and add their own url.

my strategy is

1. spam will get through, so unless your bbpress is massively used I use https://wordpress.org/plugins/bbpress-notify-nospam/ to notify me of each post and reply. I can quickly look at it, and if needed delete.
2. I also use https://en-gb.wordpress.org/plugins/moderation-tools-for-bbpress/ that way the topic or reply does not ‘disappear’ the author sees it as pending, and you get an email so you know to take action.

[Robin W]

70% in internet sites worldwide are WordPress ! Every hacker in the world knows how to identify a WordPress site. Probably 90% of sites don’t change the login url, so is this a risk?

The answer is not really.

Every site has to have a login screen, and that is visible to a hacker. If a hacker guesses an ordinary user, then all they get is an ordinary users access, so at worst they can create a post in someone else’s name.

What they are after is the admin user and their password. Then they can install plugins that add files to the site that can be used to say create a sub site that looks like a bank and try and get info from email links. You will have received scam emails with links to dodgy sites where this has been done.

The majority of site owners leave their username as admin, so hackers try and guess passwords based on the site name – so for say the French Horse Society website (if it existed) you might try admin with a password of FHS123 or french01 etc.

In other words they try and guess passwords for sites owners who have set themselves a password they can remember.

If you use a WordPress generated password, then there is no chance that a hacker will guess this or realistically can use software to break the site.

Now hackers use computers to find and target sites – they don’t sit at screens and look at websites.

So if you change your login url, then the ‘robots’ won’t see it, and chances are that they will just move on to another site, rather than search your site for a page that has login on it, but they can do this, so changing the url doesn’t stop this, it just means that you make yourself a lesser target. So it’s a good idea, but not a failsafe

Much more critically you need to have a WordPress generated password for your admins.

I’d also suggest that you look to install the wordfence plugin. This stops multiple attempts to guess password on your site, as well as a load of other security stuff. the free version is fine, and you will get lots of emails from wordfence and some that pester you to upgrade, but it is a great plugin.

Wordfence Security – Firewall & Malware Scan

last of all – don’t get obsessed by this – you website is for you and others to enjoy. Owning a diamond is lovely unless you spend your whole life worried about whether it will get stolen !

[kevvyb]

Just me being dumb. I sort of got frightened byt eh exhortaions I have seen to change the default login url for security reasons and was extrapolating that this needed to be kept relatively secure! But I take your point!

So the main thing is that it is changed. Making me wonder if I should change it to something that is more recognisable as a login but still pretty unique?

I take it that the login url(s) on this site are database generated? Or will WordPress doa similar thing for our site?

[kevvyb]

Thanks for the very quick reply Robin. And for the tips. Not sure I have been very clear. As you say I have changed my admin login from the default for security reasons. When I received the registration email though (presumably from WordPress?) is showed a link to confirm registration that inlcuded my altered wp login url; I don’t really want to be publicising that to everyone who registers for the forum. Is it possibel to avoid this?

Maybe that I am missing soemthing obvious been at it a while today and need to take a break.

[Robin W]

bbpress just uses WordPress registration and login.

bbpress then just assigns the default role on first login that is set in Dashboard>settings>forum>roles if you have that ticked, or you can manually assign if you wish.

Therefore you can ignore anything bbpressy on registration and login, and just use anything that WordPress does instead.

This gives you the ability to utilise plugins such as ‘theme my login’ to give yourself a nice registration and login (there are plenty of other good login plugins, just search around).

It looks like you have already changed the default wp urls – which is great and good security practise, so suggest you just don’t use bbpress login shortcodes or widgets, and let wordpress do your registration and login.

Do come back if you need further help

[kevvyb]

Hi

I have just installed bbPress on my site. I craeted a test user to see how it works. I was horrified to see that the email included a url for registration that is the admin url I use. I have changed this from the default for reasons of security and do not realy want to be sending out my wp admin login url to everyone who registers on the site. Is there a way around this or is it a wordpress thing?

[delta5]

I just found this:

Inline Image Upload for BBPress

[cassel]

I have used this plugin for a long time now: https://wordpress.org/plugins/bbpress-multi-image-uploader/
Although it does not let one post images INSIDE the posts (they only display after the text), it is VERY useful. The problem now, is that the plugin has not been updated in 2 years. It still works, but I was also looking for an alternative.

I will look at Chuckie’s suggestion.

[Robin W]

Put this in your child theme’s function file –

ie wp-content/themes/%your-theme-name%/functions.php

where %your-theme-name% is the name of your theme

or use

Code Snippets

[Robin W]

hmm – that’s a core WordPress bug.

It has a track ticket, but no date

https://core.trac.wordpress.org/ticket/39251

sorry, best I can do !!

[Robin W]

then use this to allow participants to close or delete topics and delete replies

bbp style pack

once activated go to

dashboard>settings>bbp style pack>Topic/Reply Display

and look at items

17, 18 & 19

[kriskl]

yes,

I have disabled all plugins but BBpress. and changed to WordPress default theme.
with your code
this is what it looks like:

1 2 … 2,843 →
it still shows the last page: 2,843

https://opendev.leetdns.com/forums/

[Robin W]

yes I see 🙂

Put this in your child theme’s function file – or use

Code Snippets

add_filter ('bbp_before_paginate_links_parse_args' , 'rew_pagintion' ) ;

function rew_pagintion ($args) {
	$args['end_size'] = 0 ;
return $args;
}

[Robin W]

what do you mean by

Hi, i would like to use WordPress native posts as topics with bbpress.

[Robin W]

that’s all fine and good, just checking 🙂

so yes you will need to look at how to share WordPress users over two sites. Above link looks good to fix, but there were lots of answers when I googled ‘share WordPress users between 2 sites’

I also saw this plugin

Share Logins Across Multiple Sites

[proversion88]

I want to separate wordpress and bbpress..wordpress is on my main domain and I want to setup bbpress on a subdomain like forum.mydomain.com

I tried with adding bbpress, but it really mess up everything on the membership side as it is already setup with custom themes and plugins and lot of modifications through code. I also need to use separate theme for forum as the default is not integrated well with my current theme..For these reasons, I want to install wp and bbpress on a subdomain as separate installation and keep it private and closed for registrations..

I checked the link you posted, and it was talking about using same database for both wp installations..But in that case, their worpdress installation is identical..Mine has too nuch complicated structure in one and the forum installation will just need bbpress only..

[Robin W]

if you want a subdomain, you’ll need to look at how to bridge two domains eg

https://stackoverflow.com/questions/30952936/sharing-user-on-2-wordpress-installs-in-2-sub-domains-on-same-server

[Robin W]

bbpress just uses WordPress users, so if your members are WordPress users, they will be bbpress users as well.

you main issue will be sharing users between two domains.

Why do you want bbpress in a sub domain ?

[proversion88]

I have a membership site with s2 member plugin and I want to install bbpress on a sub domain..the forum is not public and only my members need to access it. Is there an easy way to bridge login between bbpress and wordpress? All my members should be able to login to forum without registering again..

[Hari]

how can I set this theme as default theme for all WordPress pots too?

[Hari]

Hi, i would like to use WordPress native posts as topics with bbpress.

and I would like to install bbpress in a subfolder. but if I do that bbpress creates unnecessary slugs

I do not want bbpress to create an extra slug for example domain.com/folder/topic/orignal-post

I want below slugs ? is it possible?
domain.com/folder/
domain.com/this-this-a-post/

[Robin W]

probably a combination of

bbp style pack

once activated go to

dashboard>settings>bbp style pack>Breadcrumbs

and

dashboard>settings>forums>forum slugs to change the names

[Robin W]

ok, now in – nice site by the way !

Not sure why changing in bbpress had no effect – I can’t see your theme is doing anything.

my first suggestion would be to install

bbp style pack

and once installed go into

dashboard>settings>bbp style pack>Forums index styling

and set some of those to a larger font – just start with 1 or 2 and see if they work.

If so you can work though the rest to get what you want.

If not come back, BUT leave a couple in place and tell me a couple you have changed.

I can then look at what is being downloaded to my browser and maybe help further

[Robin W]

bbPress requires at least one Keymaster, and only keymasters can set other keymasters. However bbPress does allow you to change the last keymaster to another role without warning – leaving no keymasters, and no ability to set a keymaster.

I’ve added some code in the bug fixes tab of my style pack plugin that detects if this has happened, and allows creation of a new keymaster.

bbp style pack

once activated go to

dashboard>settings>bbp style pack>bug fixes

and you’ll see a tick box at the end.

Once you have ticked and saved, you can deactivate and delete this plugin, but I hope you’ll find a bunch of useful things in there and keep it going 🙂

[cassel]

I have been using this plugin successfully for years now to allow my members to post images in the forum without having to host them somewhere else. However, although it still works perfectly with my current WordPress version (5.4.2), it has not been updated in 2 years.

Can someone “update” or check it (it is open source) or suggest another one if/when this one no longer works?