Thanks for the reply, JJJ. I’m not a developer, so when I go to trac I’m easily overwhelmed by the number of tickets and not sure where to look for specifics.
Sometimes it’s frustrating for users like me to get information about bbPress developments. I’d expect news to be posted here on the forum. Then there’s bbpdevel.wordpress.com, but that hasn’t been updated since September. I’m sure there’s info in IRC logs too. It seems there are many places for information to be posted, and it’s not always the place I expect it.
Anyway, I really do appreciate the information, and I’m looking forward to 1.1 (and also an update to the 0.9 branch).
Thanks for the reply, JJJ. I’m not a developer, so when I go to trac I’m easily overwhelmed by the number of tickets and not sure where to look for specifics.
Sometimes it’s frustrating for users like me to get information about bbPress developments. I’d expect news to be posted here on the forum. Then there’s bbpdevel.wordpress.com, but that hasn’t been updated since September. I’m sure there’s info in IRC logs too. It seems there are many places for information to be posted, and it’s not always the place I expect it.
Anyway, I really do appreciate the information, and I’m looking forward to 1.1 (and also an update to the 0.9 branch).
@ricardouk
I share many of your concerns. I too have stumbled onto the Mingle Forum plug-in.
I have it installed along with the Mingle plug-in. This turns a WordPress site into a BuddyPress-like site with an extremely short learning curve. I had both installed, tweaked on the code to remove a couple of links that I didn’t want, modified the CSS to make a near perfect style match to my theme, and understood how to configure administrate the forum in about 3 hours.
I am not a code monkey and cannot compare the pros and cons of how Mingle Forums stacks up against the bbPress plug-in or any other solutions. The security vulnerability has also been resoled to my satisfaction.
Before I implement a solution I am more concerned with its support and sustainability. Both plug-ins have have over 50,000 downloads and the Mingle Forum plug-in was last updated 20 days ago. I had one problem/question with the installation and it was answered by the plug-in’s author within hours. Within the last 5 days the Mingle Forum’s author has posted 5 videos instructional videos on YouTube (http://www.youtube.com/user/cartpauj). All indications are that this project is alive and well.
I am going to go live with it this week and plan to use it until another plug-in solution, which is better, becomes available.
@ricardouk
I share many of your concerns. I too have stumbled onto the Mingle Forum plug-in.
I have it installed along with the Mingle plug-in. This turns a WordPress site into a BuddyPress-like site with an extremely short learning curve. I had both installed, tweaked on the code to remove a couple of links that I didn’t want, modified the CSS to make a near perfect style match to my theme, and understood how to configure administrate the forum in about 3 hours.
I am not a code monkey and cannot compare the pros and cons of how Mingle Forums stacks up against the bbPress plug-in or any other solutions. The security vulnerability has also been resoled to my satisfaction.
Before I implement a solution I am more concerned with its support and sustainability. Both plug-ins have have over 50,000 downloads and the Mingle Forum plug-in was last updated 20 days ago. I had one problem/question with the installation and it was answered by the plug-in’s author within hours. Within the last 5 days the Mingle Forum’s author has posted 5 videos instructional videos on YouTube (http://www.youtube.com/user/cartpauj). All indications are that this project is alive and well.
I am going to go live with it this week and plan to use it until another plug-in solution, which is better, becomes available.
Any idea when we’re going to see a release beat or otherwise? It’s cool that it’s get updated a lot but it makes doing anything awkward.
I’m in a tough spot with regards to internet access until I’m home from holiday on Jan 3; home or not, getting updated versions of 0.9.x and 1.0.x out asap is my top priority.
I’m in a tough spot with regards to internet access until I’m home from holiday on Jan 3; home or not, getting updated versions of 0.9.x and 1.0.x out asap is my top priority.
Maybe I am getting rusty, but looking at the diff, I don’t see it.
Basically it’s the same thing, shuffled around a bit and the same esc_url and esc_attr is being used at the end, which is the same pattern as the existing 1.0/1.1 code.
Are you sure the fix was not being caused by just having a more updated version of esc_url and esc_attr ?
Or was it just being solved by moving those two sanitizers up higher before bb_safe_redirect could ever be called. Because that was definitely an oversight on someone’s part (not me). Based on the comments I’d guess they thought their functionality was for display filtering and not actually sanitization.
Looking at esc_url though, its default is indeed meant for displaying urls by default, note the comment in the code “Replace ampersands and single quotes only when displaying.” and how the context is set by default to “display”.
Maybe test your solution with a url that contains an ampersand, it probably will not work?
Also, are you relying on the list of protocols to do the sanitization? Because that could be defeated too (and would prevent using relative urls that are legitimate).
ps. very minor but you have confusing indentation indicating nesting with the code at line 18 – which actually is not nested
Feel free to email me directly if that’s better.
Maybe I am getting rusty, but looking at the diff, I don’t see it.
Basically it’s the same thing, shuffled around a bit and the same esc_url and esc_attr is being used at the end, which is the same pattern as the existing 1.0/1.1 code.
Are you sure the fix was not being caused by just having a more updated version of esc_url and esc_attr ?
Or was it just being solved by moving those two sanitizers up higher before bb_safe_redirect could ever be called. Because that was definitely an oversight on someone’s part (not me). Based on the comments I’d guess they thought their functionality was for display filtering and not actually sanitization.
Looking at esc_url though, its default is indeed meant for displaying urls by default, note the comment in the code “Replace ampersands and single quotes only when displaying.” and how the context is set by default to “display”.
Maybe test your solution with a url that contains an ampersand, it probably will not work?
Also, are you relying on the list of protocols to do the sanitization? Because that could be defeated too (and would prevent using relative urls that are legitimate).
ps. very minor but you have confusing indentation indicating nesting with the code at line 18 – which actually is not nested
Feel free to email me directly if that’s better.
I have the same issue, I think it happened immediately after I updated the
define( ‘BB_AUTH_KEY’, xxxx
define( ‘BB_SECURE_AUTH_KEY’ xxxx
define( ‘BB_LOGGED_IN_KEY’, xxxx
define( ‘BB_NONCE_KEY’, xxxx
keys in the BB_config file – I also changed the $bb_table_prefix =
As instructed to same as WP config file, I changed this back to BB_ but that didn’t help…
Any ideas?
I am using
WP 3.0.3 and BB 1.02 (I think, I can’t see admin screen to check!)
How many version have you installed/updated?
it might be that you need to clear the database of bbPress data if you installed an earlier revision.
I actually had a slightly different experience. My permalink structure was set to custom, which was certainly not intentional. I changed it to %month%/%name% and this finally updated the link. (No effect on switching themes.)
I guess it is just a little tricky to reliably force a flush in the links.
I agree with your suggestion in the ticket that /forum/user/admin would be preferable.
Reset theme to twentyten, then reactivate the bbPress theme. then reset your permalinks – that should set it up – as in it did for me in 3.1 and 3.0.2
I’ve updated that ticket.
http://wordpress.elfden.co.uk/forum/ updated – everything cleaned out for everyone to start playing again.
I’ve just updated my WordPress blog from version 2.0 to 3.0.1 and subsequently upgraded BBPress from version 0.8.3 to the latest release (1.0.2?). However, now all the users of the forum are displaying as inactive on the front end despite the fact that they have a ‘member’ role when viewed through the admin panel.
I suspect this is related to the fact that the users are shared between WordPress and BBPress – in WordPress they have no role.
The problem is that there are 45000 subscribers so to change these manually will take quite some time. I think I’m also right in saying that users in WordPress with no role don’t have any meta values so I’m not sure this can be addressed by finding and replacing anything in the database.
Does anyone have any ideas? I really don’t want to have to assign these users roles by going through 30 at a time in the WordPress admin screens!
Thanks in advance for your help.
Weird, thanks 3sixty. I had recently readded the plugin and forgot to reset that. It works fine now. Originally i had set 900 as the character limit but i updated the plugin and it was restored to the default 300.
Weird, thanks 3sixty. I had recently readded the plugin and forgot to reset that. It works fine now. Originally i had set 900 as the character limit but i updated the plugin and it was restored to the default 300.
Hi !
I’m french and i saw that the french website isn’t updated since 1 year.
Is the project already alive (even in english) because i’m looking for a forum for WordPress !
Regards,
Fred
updated the demo, you’ll see a few widgets in the sidebar (ticket already open…)
That ticket has been fixed, demo updated.
I’m on bbPress latest trunk, testing bbPM 1.0.1 and I’ve never had any problem at all. 
I’m on bbPress latest trunk, testing bbPM 1.0.1 and I’ve never had any problem at all.
Some time ago, a forum I’m on a lot had it’s bbPress updated. Lots of stuff got fixed by that, but even more broke. Mostly plugins, for an example, the old PM plugin doesn’t seem to support line breaks anymore. Nor does quotes within HTML world at all. As an example, if I’d write <a href=”url” I’d get <a href=”url”” (same with spaces) with a few extra troubles.
So my question is this simply, what is the recommended way to fix a forum with many bugs. Is it smarter to just update the PM plugin to the latest version, even though old PM’s will be removed? Or is it possible to fix linebreaks within PM’s? And how would I go about fixing the quote within HTML problem?
I’ve updated things, but it’s caused an issue.
We updated from 0.9.0.2 to 1.0.2 bechet. Tags worked fine before the update occured. We do have a custom theme installed and tags worked fine with it installed before the update.
Just reverted to the default theme, and tags are not deleting.
Can you give more detail into what you mean by changes modifying core bbpress files? please and thanks
Thank you for helping me out so far, and providing tips on how to get better support. I apologize that I’m testy. I’ll be more patient.
