[_ck_]

Because you cannot disable access for all files in the template directory – CSS and some images have to be loaded directly by the browsers in the end.

So turning off PHP responses will do for now.

[qayqay12]

If there are never supposed to be loaded directly by the browser maybe we could also deny the access by another .htaccess config:

<Limit GET POST”>

order deny,allow

deny from all

</Limit>

Why don’t you add those .htaccess files in the repository. They will ensure security and they will not hurt on other servers than apache.

[qayqay12]

If there are never supposed to be loaded directly by the browser maybe we could also deny the access by another .htaccess config:

<Limit GET POST”>

order deny,allow

deny from all

</Limit>

Why don’t you add those .htaccess files in the repository. They will ensure security and they will not hurt on other servers than apache.

[_ck_]

There is a security bulletin being circulated this week about a “path disclosure” bug in bbPress 1.0.3 – it actually affects all versions.

It’s not a super-serious security bug in itself but it can be used to gain leverage.

Basically someone can discover the real path your files are in by causing a PHP error by trying to access a template file directly, where there is an error in the template because bbPress is not loaded at that time.

Here is a simple workaround for users on Apache (vast majority of users).

Make a file called .htaccess (note the dot at the start)

in it, put this line

php_flag display_errors off

Then upload that file to bb-templates and my-templates

The reason why we don’t put that in the master .htaccess file for all of bbPress is because you may need to see any regular errors in the future. However for the template subdirectories, there is no need because those files are never (supposed to be) loaded directly by the browser.

[jakobs]

Hi!

I have a smaller blog network (WordPress 3.1 Multisite) and bbPress 1.03.

Right now the integration works, but not fully. I can login on the forum with my wordpress user accounts but there’s some problem with cookies. I still need to login/log out one time at each site (forum/blog).

I’ve copied this from wp-config.php:

define(‘AUTH_KEY’, ”);

define(‘SECURE_AUTH_KEY’, ”);

define(‘LOGGED_IN_KEY’, ”);

define(‘NONCE_KEY’, ”);

define(‘AUTH_SALT’, ”);

define(‘SECURE_AUTH_SALT’, ”);

define(‘LOGGED_IN_SALT’, ”);

define(‘NONCE_SALT’, ”);

And of course included the salts + added BB_ suffix in bb-config.php.

I have a separate database for bbpress and the “Separate user database settings”-settings in options-wordpress seems to be right.

The URL:s under cookies is also correct (http://domain.net – as my blog).

Do you have any idea what the problem is?

Would be grateful for a solution. Thanks.

[miruru]

Thank you for this fantastic plugin, even if it is still under development. Great work so far and well done.

However I just have one small problem and cannot work out why it’s happening.

I left the slugs as default in the Forum setting and went to view the admin profile. All data is being displayed correct, however the Page Title displays, “Nothing found for User Admin”. I’ve looked everywhere but cannot find where it is going wrong. I’ve tried a different theme to no avail. This is really annoying me.

I’ve checked all the other pages and they are fine just the user page. Is there something that is causing this? I’ve tried disabling the All In One SEO plugin and then the page title says “Not Found” and the data is still being displayed correctly.

Any help would be most appreciated.

[WPsites]

Just thought I would update this post as nothing seems to have been said about the threaded posts plugin recently (https://bbpress.org/plugins/topic/threaded-posts/)

I’m in the process of setting up a forum and one of the requirements was for threaded posts so I have used this plugin.

I have it installed on the most recent version of BBpress (“Bechet” version 1.0.3) and on it’s own it works fine.

To get it to work I did have to follow the comments on the info page for this plugin. Pretty much just changed some file names.

If you want to use the threaded post plugin along with the BBpress moderation suite then you will run into problems when you come to moving and splitting threads since the moderation suite doesn’t know anything about the threaded post functionality and just cannot deal with it. So you will have your work cut out trying to hack the moderation suite to take into account the threaded posts (it is doable though).

Also the threaded post plugin may fail to list the threaded posts correctly if used in conjunction with other plugins that change the mysql query for displaying posts on the topic page. Since this plugin checks EVERY database query and if it matches what the plugin thinks is a request to display all posts from a topic then it intervenes and add something extra to the query to list the threaded posts in the right place.

As part of that, in the code for this plugin it actually says “# FIXME: This is a horrible horrible hack” in the no_child_posts function. Well I had to fix it in order for it to play nicely with some private forum functionality that changes the mysql query when requesting posts for a topic. The code I created that replaces the no_child_posts functionality is below.

function threaded_sql_where($where){

return $where . ” AND pp.post_id is NULL “;

}

add_filter(‘get_thread_where’, ‘threaded_sql_where’, 10, 1);

function threaded_sql_join(){

return “LEFT JOIN bb_post_parent AS pp ON pp.post_id = p.post_id”;

}

add_filter(‘get_thread_join’, ‘threaded_sql_join’, 10, 1);

You can download my modified version of the threaded posts plugin here: http://www.wpsites.co.uk/threaded_posts.zip

[dreamgrowers]

Oh, that makes total sense, thank you so much!

Well folks, this is exactly why I want bbpress to use my custom WP login because I’ve calibrated it perfectly to prevent spam as well as ask specific questions about the users.

Would still love to get help rediredting login to WP-admin

Thanks!

[dreamgrowers]

Oh, that makes total sense, thank you so much!

Well folks, this is exactly why I want bbpress to use my custom WP login because I’ve calibrated it perfectly to prevent spam as well as ask specific questions about the users.

Would still love to get help rediredting login to WP-admin

Thanks!

[amnion]

Indeed, this is an excellent plugin. Easiest transfer of forums I have ever done.

[amnion]

Indeed, this is an excellent plugin. Easiest transfer of forums I have ever done.

[Ryan Gannon]

Also, bbp_reply_author_link( array( ‘type’ => ‘avatar’ ) ); returns the avatar thumbnail is there a way to retrieve the full version of the avatar?

[Francesco Bigiarini]

It’s a known bug which has been fixed in the last (not released to the public) version. bbPress (standalone) is dead and I have decided to freeze all my plugins and waiting for the plugin version to come.

[Francesco Bigiarini]

It’s a known bug which has been fixed in the last (not released to the public) version. bbPress (standalone) is dead and I have decided to freeze all my plugins and waiting for the plugin version to come.

[chiefchick]

Blahman,

Did you create that forum with bbpress?? that’s amazing. can i pay you to do mine?

[chiefchick]

Blahman,

Did you create that forum with bbpress?? that’s amazing. can i pay you to do mine?

[LPH2005]

I decided not to re-open ticket 1487 but wanted to share the actual resolution: site collapses after uploading latest files.

1. The theme was returned to WP default.
2. The bbpress plugin was deactivated.
3. The 2908 files were removed from the server.
4. The 2968 files were uploaded.
5. The bbpress plugin was reactivated.
6. Permalinks were resaved.
7. The “discussions” index page was resaved with the new template for index.
8. ALL forums were re-saved.

Now, the important distinction in the process is that the 2908 files were removed rather than simply over-writing files. Otherwise, errors are tossed all over the place.

Hope this helps others playing around with the bbpress plugin.

[cbowers428]

Hey so I’ve been trying everything to get bbpress up and running on my site and I finally thought I had it but when I visit the forums I see the login screen and when I do it says

Access to the webpage was denied

You are not authorized to access the webpage at http://chubshub.com/wp-content/plugins/buddypress/bp-forums/bbpress/bb-login.php. You may need to sign in.

Does anyone know why this happens? I’ve made a mySQL database and username and it doesn’t work. I’m not really sure whats going on I’m pretty new. Thanks!

[shinigami87]

I solved thanks this topic: https://bbpress.org/forums/topic/wp-integration-coockie-does-not-work

I moved wordpress from “/wordpress” to the root and cookies integration now works!

[shinigami87]

I solved thanks this topic: https://bbpress.org/forums/topic/wp-integration-coockie-does-not-work

I moved wordpress from “/wordpress” to the root and cookies integration now works!

[Ryan Gannon]

Any ideas on how to use wp_tiny_mce() for replies and posts?

[Pedal Blog]

Have a similar problem –

-Tried to integrate my wp site w/ bbpress

-Could not login as admin to my wp site

-Removed bbpress integration settings

-Now able to log into my wp site (whew!)

Either I did something wrong in the settings (tired it twice with same resultes), or perhaps my challenge is related to this thread.

I’ll be watching this thread for updates.

[miguelnetto]

I’m also wanting it.

[miguelnetto]

I’m also wanting it.

[alanchrishughes]

I know it is still not finished, but I was just playing around with a local installation and had bbpress up and working, but when I activated Buddypress it completely stopped bbPress, pages would just redirect to the blog’s front page.