[madflute]

Hi, I need help. We, a non-profit organization with no sponsors, have no developers. I am the only one trying to maintain the site. I am not too sure if I fully understand how bbP works. I installed them by someone’s recommendation on the net or the PacIt book. It’s been a long time. I don’t remember the details. The forum is still active, and we have about 4.5k subscribers.

I have noticed a couple of bbP legacy plug-ins that seem to be inviting attackers, and I don’t know what to do. They are as follows:
– bbP Manage Subscriptions
– bbPress Toolkit

Other bbP plugins installed are:
– AsynCRONous bbPress Subscriptions
– bbPress
– bbPress Unread Posts v2
– GD bbPress Tools

Any pointers would be appreciated

[Robin W]

I have noticed a couple of bbP legacy plug-ins that seem to be inviting attackers,

can you explain what you mean by this?

[madflute]

Thank you for your response. We have been bombarded by false registrations, which look like a bot attack. They register as a new subscriber, and they change their password, but none of them ever log in.

[Robin W]

Thanks

I’m not sure that these would be causing false registrations, as bbpress just uses the wordpress registration system.

bbp manage subscriptions has been withdrawn
bbpress toolkit should not be used as it was closed due to a security issue
bbpress unread posts is also no longer maintained

the key features of all 3 are now in

bbp style pack

[madflute]

Thank you for your response.

bbp manage subscriptions has been withdrawn
bbpress toolkit should not be used as it was closed due to a security issue
bbpress unread posts is also no longer maintained

What will happen to our site if I delete them? I took a look at ‘bbp style pack’ but was not clear if it will keep our site functioning after deleting these 3 plugins above.

Thank you so much for your time.

[Robin W]

I cannot remember what manage subscriptions did, but in style pack subscriptions management tab replaces what bbpress toolkit did with subscriptions

the unread posts tab I believe directly replaces the unread posts plugin

[madflute]

I removed these 3 plug-ins and installed the bbp style pack. The forum is still functioning as far as I can tell.

I was also able to stop the registration attack by hiding the login page. Thank you so much for your help.

[Robin W]

Great – glad you are fixed !!