[Robin W]

probably several plugins, and lots of articles – this is really a wordpress thing

for instance

https://wordpress.org/plugins/force-strong-passwords/or

http://www.wpbeginner.com/plugins/how-to-force-strong-password-on-users-in-wordpress/

[Robin W]

bbp-style pack lets you style bbpress

https://wordpress.org/plugins/bbp-style-pack/

[jamesburden]

Hi – hope someone can help with this.

I have a forum website set up using bbPress. Forum members are specifically invited as it is a leadership course for selected individuals. I create their user accounts including a strong password etc and send them the details.

An issue that I’ve come across is that the participants are widely spread around the world, some of whom have limited awareness of security issues on the internet. I want to ensure that they cannot change their password to an insecure one.

I’ve got iThemes security installed on the site and have activated the strong password enforcements with a minimum level of Subscriber. All of the course participants have a primary role of subscriber, with a forum role of Participant. With the settings I have in place they should not be able to change their password to a weak one. And yet they are currently able to log in and change the password to ‘changeme’ for example.

I’ve reached out to iThemes security but nothing helpful from them yet,

Can anyone here help me to figure out how to ensure that forum users cannot change their passwords to weak ones? Is there some setting in bbPress that I’m missing? Or some workaround that others use? I can’t imagine for a minute that I’m the only one to have come across this issue, but googling has turned up a surprising lack of information about how to resolve it.

Many thanks for your help.

James Burden

Site URL: http://gcfleadership.org
WordPress version: 4.5.2
bbPress version: 2.5.9

[jamesburden]

Hi – hope someone can help with this.

I have a forum website set up using bbPress. Forum members are specifically invited as it is a leadership course for selected individuals. I create their user accounts including a strong password etc and send them the details.

An issue that I’ve come across is that the participants are widely spread around the world, some of whom have limited awareness of security issues on the internet. I want to ensure that they cannot change their password to an insecure one.

I’ve got iThemes security installed on the site and have activated the strong password enforcements with a minimum level of Subscriber. All of the course participants have a primary role of subscriber, with a forum role of Participant. With the settings I have in place they should not be able to change their password to a weak one. And yet they are currently able to log in and change the password to ‘changeme’ for example.

I’ve reached out to iThemes security but nothing helpful from them yet,

Can anyone here help me to figure out how to ensure that forum users cannot change their passwords to weak ones? Is there some setting in bbPress that I’m missing? Or some workaround that others use? I can’t imagine for a minute that I’m the only one to have come across this issue, but googling has turned up a surprising lack of information about how to resolve it.

Many thanks for your help.

James Burden

Site URL: http://gcfleadership.org
WordPress version: 4.5.2
bbPress version: 2.5.9

[Robin W]

yes this is a known issue

see

http://www.rewweb.co.uk/bbpress-wp4-fix/
and/or

http://www.rewweb.co.uk/bbpress-wp4-fix2/

there’s a trac ticket for it somewhere, but bbpress authors see it as a wordpress fix

[Robin W]

ok, thanks – sorry it’s sometimes hard to understand the obvious until you see it !

so I’m presuming that there should be some content to that post?!

bbPress is tested with wordpress default themes. It maybe a conflict – you need to check plugins and themes

It could be a theme or plugin issue

Plugins

Deactivate all but bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.

Themes

If plugins don’t pinpoint the problem, as a test switch to a default theme such as twentyfifteen, and see if this fixes.

[Robin W]

Also I am not sure there is a visitor WordPress role.

oops… no there isn’t – old code left on my test site !

and who gets what were just examples 🙂

[Robkk]

I say edit Robin’s code and change

if ($role == 'subscriber' ) $new_role = 'bbp_spectator' ;

To this.

if ($role == 'subscriber' ) $new_role = 'bbp_participant' ;

And in my opinion you should not auto-assign moderators and just manually update the users roles for each of the users you trust to moderate the forums. Also I am not sure there is a visitor WordPress role.

https://codex.wordpress.org/Roles_and_Capabilities#Summary_of_Roles

[Robkk]

@aminc99

If you are hosted on one.com they have this guide to read.

http://one-docs.com/guides/en/wordpress-login-blocked/

[Robin W]

bbPress is tested with wordpress default themes. It maybe a conflict – you need to check plugins and themes

It could be a theme or plugin issue

Plugins

Deactivate all but bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.

Themes

If plugins don’t pinpoint the problem, as a test switch to a default theme such as twentyfifteen, and see if this fixes.

[Robin W]

No problem !

The core issue is with wordpress for fixing !

[sharmavishal]

maybe this can help

https://gist.github.com/sc0ttkclark/e5de9d9f2f13964bcecc

and

https://wordpress.org/plugins/multisite-bbpress-slave/

i tested both and was not able to get it working on my setup

[Robkk]

here is the ticket for the issue.

https://bbpress.trac.wordpress.org/ticket/2906

[Robin W]

presume you have

https://en-gb.wordpress.org/plugins/bbpress-genesis-extend/
installed?

[giobby]

[I am just creating a new topic about this]

I’ve finally completed the conversion (took only 8 hours against the 2 days of the previous versions).

Nevertheless, big problem here: I can see no forum after the conversion.
I’ve been checking the database schema in which wordpress is installed and nothing….
I can only find an empty wp_bbp_converter_translator table and for the rest: no users converted, no posts, no forum and topics tables.

Does someone has any idea why this happened?
It actually looked like it was converting something and the number of interactions I’ve seen in the log during the conversion matches the actual numbers in PhpBB.

I would appreciate if someone can help.

Thanks,

Gio

[giobby]

Ok, I’ve finally completes the conversion (took only 8 hours against the 2 days of the previous versions).

Nevertheless, big problem here: I can see no forum after the conversion.
I’ve been checking the database schema in which wordpress is installed and nothing….
I can only find an empty wp_bbp_converter_translator table and for the rest: no users converted, no posts, no forum and topics tables.

Does someone has any idea why this happened?
It actually looked like it was converting something and the number of interactions I’ve seen in the log during the conversion matches the actual numbers in PhpBB.

I would appreciate if someone can help.

Thanks,

Gio

[name]

I ended up getting this working by ditching wpMandrill plugin and using Easy WP SMPT plugin https://wordpress.org/plugins/easy-wp-smtp/

[Robkk]

This plugin might work for terms and conditions.

This is an example of adding inputs for contacts in their profile.

https://codex.bbpress.org/layout-and-functionality-examples-you-can-use/#9-adding-social-media-contacts-to-bbpress-profile

[Robkk]

Use a plugin like Reveal IDS.

[name]

After some more digging, I see that Mandrill is rejecting emails sent to noreply@<domain>
So perhaps this rejection is causing WordPress to send the email instead?

[alzaran]

Ticket created: https://bbpress.trac.wordpress.org/ticket/2956#ticket

[Robkk]

Not entirely sure this plugn works still, but there is this still.

https://wordpress.org/plugins/bbpress-digest/

[Robkk]

1. Its the WordPress Toolbar, used on all WordPress sites by default.

2. This plugin adds avatar suggestions, it might not be presented easily for users, but he expains it in this video.

3. bbPress by default doesn’t have the ability to upload files, for avatars that plugin I mentioned allows avatar upload.

4. You can filter the default wordPress smilies and use custom ones, their is emoji to use because of WordPress, also there a good plugin that has a feature to import phpBB smilies call WP-Monalisa.

[name]

Wordpress: 4.5.2
bbPress: 2.5.9

Hi there,
I use the wpMandrill plugin (v1.33) to send email through Mandrill.
It works fine for Buddypress emails, and other standard WordPress emails.
However bbPress emails don’t get sent through Mandrill.

What is bbPress doing differently about how it sends email notifications?
How can I get bbPress to correctly send through Mandrill?

I’ve read a few previous topics, and they seem to indicate it’s something to do with how bbPress handles BCC, and no reply.

thx
Vanessa

[Robkk]

Also, even after the plug in is deleted the roles (Keymaster and Participant) still appear in the user list under the “Role” column, but I thought they were only associated with bbpress. Is that correct?

This is a known bug, there is some code in the codex here to use to remove the user roles whenever you are resetting your user roles. Removing the roles and reinstalling bbPress might fix this issue, if it does not, you can use this plugin to switch to another Admin temporarily and then edit your user and switch its forum role. Make sure to edit the user by clicking the edit link by the users avatar. I think there is still an issue bulk changing a users forum role from the users list.

https://wordpress.org/plugins/user-switching/

Make sure that your default role for users are Participant in Settings > Forums. Also make sure that the default blog role for your users is Subscriber in Settings > General.

If this developer only did a short job and is done, I recommend not keeping their account as Admin/Keymaster. If they are hired for a project that is not finished or is like say doing maintenance for your site for awhile, okay keep them, but you know just be cautious since this happened to your site.

Just to be sure, make sure to check out this link for more help.
https://codex.wordpress.org/FAQ_My_site_was_hacked