[chrishajer]

I think it would probably work if you changed the user check to reflect bbPress users and not WordPress users and levels.

_ck_ posted something similar a while back on the WordPress.org trac site about blocking long query strings. Maybe she will post here about this.

simple WordPress and bbPress security plugin to block long requests

https://core.trac.wordpress.org/ticket/8152

[gerikg]

I use deep integration for WP themes that have their own option. When you change something in the option bbPress follows.

[gerikg]

If you don’t enter a prefix, bbPress assumes you don’t want the integration.

[pagal]

Can I use this wp plugin for bbpress?

< ?php

/*

Plugin Name: Block Bad Queries

Plugin URI: http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/

Description: Protect WordPress Against Malicious URL Requests

Author URI: http://perishablepress.com/

Author: Perishable Press

Version: 1.0

*/

global $user_ID;

if($user_ID) {

if(!current_user_can(‘level_10’)) {

if (strlen($_SERVER) > 255 ||

strpos($_SERVER, “eval(“) ||

strpos($_SERVER, “CONCAT”) ||

strpos($_SERVER, “UNION+SELECT”) ||

strpos($_SERVER, “base64”)) {

@header(“HTTP/1.1 414 Request-URI Too Long”);

@header(“Status: 414 Request-URI Too Long”);

@header(“Connection: Close”);

@exit;

}

}

}

?>

And tell me how can I make my forums more secure?

Nedd Tips and Tricks!!

And did anyone make any security concern plugin for bbpress?

Thanks,

Pagal

[masterlock1]

I’ve recently ungraded to WordPress 3.0(Multi-User). The instructions referenced here: http://wpbbpthemes.org/integration/ are for an earlier, single-user version. Any feedback would be appreciated. Thanks.

[kevinjohngallagher]

Great! Screenshots make life so much easier.

Ok so you physically know the files are there, but can’t load them in the browser (we get a 404).

If you’ve had htaccess issues before, I’d have a look there first, but really if it’s loading bbPress it shouldn’t be an issue (always good to rule things out though).

My gut, growing by the day sadly, tells me it’s a permissions issue. Which is not to say you’ve done anything wrong. Make sure that the “my-templates” directory and all directories/subfolders are at 0755.

Test again. if things work, then change everything under the “my-templates” directory to 0644, and confirm working.

Finally, and this is out on a limb a little, check you’re not running any caching plugins in wordpress.

If that doesn’t work, we’ll see what we can find in the back (the back is a mythical place apparently)

======================================================================

EDIT: Actually, do you have some form of htaccess command to change everything from http://www.shoeynet.com to just http://shoeynet.com ?

That might not be it, but it’s something else to knock off the list.

[kevinjohngallagher]

Hi there,

Installing with a preexisting wordpress install is absolutely fine, and you don’t need buddyPress.

I’d suggest using this excellent tutorial:

http://wpbbpthemes.org/integration/

[shoeyn]

It’s probably my htaccess file because I’ve had problems with that in the past with other installations, but what would I have to change for it ?

and I’ve added the screenshot to the first post on my wordpress install

http://shoeynet.com/2010/07/publishers-wanted/

Everything which is greyed is not necessary

[chrishajer]

The files are not where you think they are, or the permissions are wrong. Or you have something weird going on with your WordPress .htaccess file. But if a physical file or directory exists on the server (like your forums directory) WordPress won’t handle the request for it.

Can you post a screenshot from your FTP program showing the location of all the theme files in relation to your bbPress installation?

[kevinjohngallagher]

Don’t worry about Deep Integration. If you don’t know it, you’ve not got it, and that makes life easier

If you can’t load the stylesheet of the theme you want to use in your browser (and therefore independant of both wordpress and bbpress – as you’re essentially just loading a text file from a server), then that’ll be the issue.

Activating the theme you’re after would be great, as would telling us what folder it’s in and what it’s called

[shoeyn]

No I can’t

What’s deep intergration ? (Knew to this)

bbPress 1.0.2 and WordPress 3.0

[kevinjohngallagher]

Can you load the stylesheet of the theme you wish to load directly into the browser (by typing the URL into the address bar) ?

Are you using Deep Integration?

What version of bbPress and WordPress are you using?

Kev

[ethanthekiwi]

I am running WordPress 3.0 on a Turnkey Linux based server that is my own (not hosted). I downloaded the latest version (1.0) of bbPress and put it in /var/www/wordpress on my server. I went to mysite.org/bbpress (that’s not my actual domain, but it’s an intranet site anyway so it doesn’t matter) and went through the installer. I created a mysql database and everything else. I skipped integrate with WordPress (for now) and the installer worked. I went to mysite.org/bbpress and I could see the front page of the forum and everything looked fine. When I try to log in using the Key Master username and password I got from the install, I get sent to a page with:

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/backpress/class.wp-auth.php on line 273

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/backpress/class.wp-auth.php on line 273

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/backpress/class.wp-auth.php on line 273

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/backpress/class.wp-auth.php on line 273

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/backpress/class.wp-auth.php on line 273

Warning: Cannot modify header information – headers already sent by (output started at /var/www/wordpress/bbpress/bb-config.php:1) in /var/www/wordpress/bbpress/bb-includes/functions.bb-pluggable.php on line 232

I went and deleted everything and started over with the same result. I don’t know if it means anything, but I didn’t get an email from the site with the Master Key password either. Can anyone give me an idea of what I might be doing wrong? I not a coding expert, but I can usually figure these kind of things out. I would really like to use bbPress as it looks like the best forum for my users (which includes a wide range of people many of whom are not technologically savy). If you need any more technical details let me know. Thanks in advance.

[shoeyn]

I’ve integrated bbpress on top of my wordpress installation

http://shoeynet.com

http://shoeynet.com/forums

No matter what I do, I cannot get the themes to work, all permissions are right and they are all in the right place, but I think it’s conflicting, I think wordpress is trying to take ownership of the theme files instead of bbpress

Can someone please help

(Because of issue, I’ve taken out link to forums from wordpress page)

[chrishajer]

Where is the menu you’re talking about? If you want a link back to your WordPress site in your header, just edit the template file header.php and put the link wherever you want it.

[kevinjohngallagher]

I don’t believe you can.

I’m sure that bbPress requires a WordPress table prefix for integration, at least in the installer.

[FMA]

I don’t want to change anything to my table-prefix’. How can I resolve this problem, then?

[kevinjohngallagher]

Not really. At least not easily, and there is no existing and easy to use plugin. That said, if you’re dilligent enough and have enough PHP skills you could probably garnish a solution from the threads _ck_ links to here:

Extra dropdown field in registration page

[EDIT chrishajer]

If you have bbPress integrated with WordPress (sharing database and logins), then I strongly suggest using WordPress for registrations as you can theme and plugin to your hearts content there.

[kevinjohngallagher]

Howdy,

I’m after some feedback folks, and I’d really apprecaite anyone who could spare some time to jot me down some quick answers:

• If you use Deep Integration for a bbP/WP install, could you please list the reasons why?

• What data, if any, do you pull into your forum via a WordPress function?

• What WordPress plugins are displayed on your forum?

Any and all data from any level of bbPress user would be really really helpful.

Thank you,

Kev

[alex_ht]

Have installed the latest bbpost version and successfully integrated it with my wordpress site. I am looking for someone to integrate bbpost into my existing wordpress theme (cubit). Please post a bid.

Integration must be clean and meticulous. Css not as important – I can do that later myself.

PayPal payment preferred.

[chrishajer]

I recommend uploading all the WordPress files again. Looks like something happened on the transfer.

If that does not resolve it, please direct your question to the wordpress.org/support forums since this looks to be a WordPress issue.

[chrishajer]

There are no line numbers in this file:

http://svn.automattic.com/wordpress/tags/3.0/wp-includes/wp-db.php

[kevinjohngallagher]

I’m afraid that error has nothing to do with bbPress, but is a WordPress error. You’ll get a quicker answer if you asked on the WordPress supoprt forums.

Good Luck!

[chrishajer]

There should not be line numbers in that file. I wonder if someone on the WordPress side checked in code with line numbers?

What version of WordPress are you using? And honestly, this looks like a WordPress not bbPress issue.

Related to this recent report:

https://bbpress.org/forums/topic/fatal-error-call-to-undefined-function-2

[mmurasko]

Here is the code:

1 <?php

2 /**

3 * WordPress DB Class

4 *

5 * Original code from {@link http://php.justinvincent.com Justin Vincent (justin@visunet.ie)}

6 *

7 * @package WordPress

8 * @subpackage Database

9 * @since 0.71

10 */

11

12 /**

13 * @since 0.71

14 */

15 define( ‘EZSQL_VERSION’, ‘WP1.25’ );

16

17 /**

18 * @since 0.71

19 */

20 define( ‘OBJECT’, ‘OBJECT’, true );