[artmuns]

Anyone know about this?

During regular research audits of our Sucuri Firewall, we discovered a Stored XSS vulnerability affecting the bbPress plugin for WordPress, currently installed on 300,000 live websites, one of them being the popular wordpress.org support forum.

Exploitation Level: Easy/Remote
DREAD Score: 6/10
Vulnerability: Stored XSS
Patched Version: bbPress 2.5.9
As a Cross-Site Scripting (XSS) vulnerability, it could allow this user to hijack other user accounts, perform actions on their behalf (like administrators, moderators, etc.) to escalate its user’s privileges.

[mojebartar]

Hi
I use a membership system in my site. So i want that when the user clicks on edit in the bbpress Profile, to be redirect to another page(link).
How do I do this?
Thanks

[Manjeet-Kuldeep]

Hi All,

I am Using budypress + bbpress plugins in my wordpress.
Now I want that when a member reply a topic, this form open under member profile.
Basically I need to change bbpress theme which my custom files. But I unable to file them location from where it is call and how I can call my custom header and footer.

Thanks,
MAC

[gdelle]

Im hoping someone can help… Im using bbpress/buddypress theme and my support is not helping at the moment. They have a 24-48 hour window..

Half the site is 404 errors. My theme uses/recommenced rtmedia, I updated it and all went wacky. Only thing working Is the forums!

Now I had many plugins going but shut Every single one down except bbpress/buddypress. Even required theme plugins. Ive even deleted 90% of them and still cant fix the issue…

I know this is not my ‘support’ Im just at wits end and cant fix it, Im reaching out hoping someone can help… I can pay. We have 200+ members, while not a lot its a lot for us as we are so new.

We’ve been half down for about 8 hours now…

Its an adult content site so I dont know if I can/should post a link here… I can give admin, etc.

This is the theme Im using.

http://themeforest.net/item/kleo-next-level-wordpress-theme/6776630

[Robin W]

not quite sure what you are after.
can you not use the shortcodes

https://codex.bbpress.org/features/shortcodes/

[Hamlet_PL]

Hi,
I have problem with bbpress after update. I get message:

Warning: in_array() expects parameter 2 to be array, null given in /home/users/domain/public_html/domain.com/wp-content/plugins/bbpress/includes/common/functions.php on line 1446

line 1446:
if ( in_array( ‘post_parent__in’, $wp->private_query_vars ) )

Similar thread:
https://wordpress.org/support/topic/bbpress-crash-after-update?replies=1

regards

[Stephen Edgar]

@jkuzma, I’ve moved this to its own topic.

I did not think your issue was to do do with 2.5.9, as you’d replied to I have the same exact problem to the original authors post from before bbPress 2.5.9 was released.

Can you add here a list of your plugins and the theme you’re using so I can try and replicate your setup and reproduce the issue please.

p.s. I won’t be able to now, but will look in the mornings its half past midnight here local time, and yawn, I’m tired 😉

[jkuzma]

Most likely all the above replies which are *not* the same thing, they are all different errors are caused by the same thing though, a plugin or theme conflict.

Yes, a BBPress conflict, because this issue did not exist prior to updating yesterday (May 2nd.)

This is a problem on the backend, and is not theme or plugin dependent, as I’m seeing it on more than one site. I have even reverted back to the previous version of BBPress, changed my PHP version, etc.

I get this error anytime I am editing/updating a post/page on the backend. The post/page will end up saving, but the errors popup, sometimes with wp-includes/pluggable.php as well (which I’ve also replaced.)

I’ve also gone through the tedious process of uninstalling and reinstalling every plugin on my site. It’s quite obvious that disabling only BBPress fixes the problem, which is not a solution by any means.

[Red Sand Media Group]

Hi there Kelly,

I’m the developer of WP-SpamShield. I’m sorry to hear about the issue you’re having and I’ll be happy to help.

That sounds like you have a some type of conflict that is more specific to your site setup or configuration. We have a lot of users on bbPress, and most are having no issues. (We do a lot of testing to ensure compatibility.) So, there shouldn’t be any generalized conflicts with bbPress.

We have put together some excellent troubleshooting options for our plugin users, including FAQs, a Troubleshooting Guide, Known Conflicts page, and Support Request page.

Please take a few minutes to work through the Troubleshooting Guide and FAQs, as these solve over 90% of issues users have.

One of the things that the Troubleshooting Guide and FAQs will ask you to do is turn on logging. When logging is enabled, anything the plugin blocks will be logged. If you feel that there is a conflict, and something is being blocked that shouldn’t be, you can test it out after you enable logging. If it doesn’t show up in the log, then that tells you that something other than the plugin is blocking it.

If the information provided doesn’t solve the issue for you, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so please head over to the WP-SpamShield Support Form, and take a moment to fill out a support request. That will allow us to help you diagnose this, find out what the real issue is, and get things working right for you. (If the issue does by chance turn out to be a bug in the plugin, we always try to fix those within 24 hours, and get a new version out with the fix.)

– Scott

Please note that the WP-SpamShield Support page is our main support venue, not the WordPress or bbPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

[Red Sand Media Group]

Hi there Kelly,

I’m the developer of WP-SpamShield. I’m sorry to hear about the issue you’re having and I’ll be happy to help.

That sounds like you have a some type of conflict that is more specific to your site setup or configuration. We have a lot of users on bbPress, and most are having no issues. (We do a lot of testing to ensure compatibility.) So, there shouldn’t be any generalized conflicts with bbPress.

We have put together some excellent troubleshooting options for our plugin users, including FAQs, a Troubleshooting Guide, Known Conflicts page, and Support Request page. Each of these are linked from the plugin’s settings page in the WordPress admin. Please take a few moments to work through the FAQs and Troubleshooting Guide as these solve over 90% of the issues users bring to us.

If the information provided doesn’t solve the issue for you, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so please head over to the WP-SpamShield Support Form, and take a moment to fill out a support request. That will allow us to help you diagnose this, find out what the real issue is, and get things working right for you.

– Scott

[Soul]

Hi Stephan
nice work for the update. But it is forgotten the pagination when threaded reply is activated.
Will bbpress do this integrate asap?

Best regards.

PS: I made the patch it was mentioned before.

[asoukhoverkhov]

I am in trouble. Menu link /wp-admin/edit.php?post_type=reply does’t work. It leads to a page with a notice that page does’t work and
ERR_EMPTY_RESPONSE…

I’ve tried do uninstall and to reinstal bbPress but it does’t help. I have thousands of topics and replies already, my forum is not empty. What should I do?..

[Robkk]

@janeakshar

You have to create a child theme, and copy and edit the feedback-no-search.php template, and put that edited file in a folder called bbpress in that child theme.

[Robkk]

If you are using bbPress moderation you go to the plugin settings and disable only allow approval once.

[Robkk]

This have clickable category links though, but you can use this file in a folder called bbpress in a child theme.

https://github.com/robkk/bbPress-Hierarchical-Forum-and-Category-Layout

[Stephen Edgar]

Having created a 2nd keymaster user this sounds like a plugin conflict, follwo the steps here to see if you can narrow down which plugin is causing the conflict

https://codex.bbpress.org/getting-started/troubleshooting/#plugins

[Stephen Edgar]

For the bbp_setup_current_user issue see:

bbp_setup_current_user was called incorrectly

Most likely all the above replies which are *not* the same thing, they are all different errors are caused by the same thing though, a plugin or theme conflict.

See this https://codex.bbpress.org/getting-started/troubleshooting/

[Robkk]

@zimmermannc You can use this code php code snippet/plugin and it will put the forum form in bbPress user profiles for users that can moderate.

https://gist.github.com/ntwb/9887310

[Robkk]

You can use something like this.

Add this php code snippet into your child themes functions.php file or add the function to a plugin like functionality.

add_action( 'bbp_theme_after_topic_author_details', 'rkk_add_register_date' );
add_action( 'bbp_theme_after_reply_author_details', 'rkk_add_register_date' );
function rkk_add_register_date() {{ ?>
  <span class="bbp-user-register-time">
    <?php printf( __( 'Member since: %s',    'bbpress' ),
    date( get_option( 'date_format' ), strtotime( get_the_author_meta( 'user_registered' ) ) )
    ); ?>
  </span>
<?php }}

[Kelly]

I cant make a forum with my admin account. I did some Googling… Found old info and dont understand some of it…. I created another user with a Keymaster and still cant make forums.

I added bbPress/BuddyPress to my current theme.

This is my site http://kastyles.co

These are the only other plugins running.

Comment Reply Notification
Contact Form 7
Instagram Feed
MailChimp for WordPress
ThemeREX Utilities-Needed for my theme
WP-SpamShield

[jkuzma]

I have the same exact problem:

Cannot modify headers. Parameter 2 to be array, null given in …/plugins/bbpress/includes/common/functions.php on line 1446

My pages/posts can be updated/published, but I get a blank white page with this error each time I update.

[jon]

I think is outdated, just did it on my bbpress and broke it. Everything is back to normal thx for the backups. Anyway my point is… is there someone who got it working?

[Stephen Edgar]

This seems to be after 24-36 hours of run time, so I am not sure if I am running across some sort of session expiration or what.

Yes, that is exactly what you are coming up against, on the technical side, its WordPress dropping the MySQL session, the work around is to every few,4,6,8,12 hours even is to open a new browser tab and refresh a WordPress admin page and that should stop those ------

Is it possible to re-run an import, picking off where it left off?

It’s supposed to, there’s some improvements here coming in bbPress 2.6, I also strongly suggest using 2.6-alpha available from https://bbpress.org/download, there will be no more import changes before 2.6 ships and there are vast improvements to importing in 2.6.

Give it a try and let me know it goes 🙂

[Stephen Edgar]

@rnmartinez I just replied in your other topic, I’ll close this one but feel free to ask questions in that one and I’ll do my best to get you sorted 🙂

SMF Import question

[Stephen Edgar]

You should try bbPress 2.6-alpha, there are lots of bug fixes for SMF in this upcoming release

Grab it from https://bbpress.org/download