Support » Plugin: BuddyPress Docs » Buddypress Docs Plugin accessible for everyone

  • Hello,

    It looks like I have got the same problems discussed here:
    https://wordpress.org/support/topic/buddypress-docs-attachments-directory-is-publicly-accessible/

    BuddyPress sections are correctly shown only if users log in but the Docs link is publicly accessible.

    I have checked my Apache settings and AllowOverride is currently activated as you can see here:
    <Directory “/”>
    AllowOverride All
    Options ExecCGI FollowSymLinks IncludesNOEXEC Indexes SymLinksIfOwnerMatch
    </Directory>

    How can I solve this as it’s quite important for me to have that page not accessible to the world.

    Many thanks,
    Alessio

    • This topic was modified 8 months, 1 week ago by  alessiocasa.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Boone Gorges

    (@boonebgorges)

    > but the Docs link is publicly accessible.

    I assume this means “when you click the link for the attached file, you are able to download the attached file”. If not, you are experiencing a different problem from the one described in the above link – please provide more details about exactly what you’re seeing and what you think you should be seeing.

    If I’m correct that this is about attachment downloads, here are a few things to confirm:

    – What do attachment links look like? Can you share one here? (feel free to remove the domain name if you’d like)
    – Look in the Docs directory on the server. This is probably at wp-content/uploads/bp-attachments. Find the subdirectory corresponding to the ID of a Doc you know should be hidden, and then look for a (hidden) .htaccess file inside. Do you see it? What is the content?
    – Do other .htaccess directives work on your system? For example, do you have “pretty permalinks”?
    – If possible, configure Apache so that it does more detailed ‘rewrite’ debugging, to see if rewrites are being triggered in these cases

    Hey Boone,

    Thank you very much for your email. Apologies, it was my fault setting the wrong permissions of the file while uploading it.
    One quick question, is it possible to change the default access permissions to something else, so the users will not need to amend it?
    I am referring to “Who can read this doc?”, “Who can edit this doc?”, etc.

    Many thanks,
    Alessio

    Ops, I am new to WordPress and this support forum. Looks like I cannot remove the domain name in my first post

    Plugin Author David Cavins

    (@dcavins)

    You can filter the default access permissions using a filter: bp_docs_get_default_access_options

    Your code might look something like:

    add filter( 'bp_docs_get_default_access_options', function( $defaults, $doc_id, $group_id ) {
    	// Add logic to change the default settings here...
    
    	return $defaults;
    }, 50, 3 );

    Hi,

    Thank you for your reply.
    When I try to append that code to wp-content/plugins/buddypress-docs/includes/functions.php the site breaks.
    Do you have any documentation available that explains how to implement this?

    Many thanks

    Plugin Author David Cavins

    (@dcavins)

    Hi @alessiocasa-

    You could put something like that in a bp-custom file, as described here:
    https://codex.buddypress.org/themes/bp-custom-php/

    -David

Viewing 6 replies - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.