Skip to:
Content

BuddyPress.org

Opened 8 years ago

Closed 2 years ago

#7949 closed enhancement (invalid)

Restrict private messages sent via ID to only friends to prevent spam

Reported by: hallme Owned by: espellcaste
Priority: normal Milestone:
Component: Messages Version:
Severity: normal Keywords:
Cc:

Description

When sending a private message from your own profile via "Compose", the ability of being able to send a message to a user via ID has allowed a bot to send a spam message to all users.

Can messages sent via ID filter out non-friends to prevent this?

Change History (5)

#1 @r-a-y
8 years ago

You can use this plugin for now: ​https://github.com/r-a-y/bp-pms-for-friends

Might be time to merge that into Core. If so, would have to be considerate of other plugins like BP Follow.

#2 @DJPaul
8 years ago

  • Milestone Awaiting Review → Under Consideration
  • Type defect (bug) → enhancement

#3 @espellcaste
2 years ago

  • Milestone Under Consideration → Up Next
  • Owner set to espellcaste
  • Status new → assigned

I'll look into this.

I think it is odd that a bot can do this assuming it needs to be logged first.

#4 @imath
2 years ago

  • Milestone Up Next → 15.0.0

#5 @espellcaste
2 years ago

  • Milestone 15.0.0
  • Resolution → invalid
  • Status assigned → closed

@hallme Sending a message via ID is not currently possible.

I'll resolve this as invalid. But feel free to share more. I assume since this ticket is 6 years old, it was a bug in the past, but not anymore.

Note: See TracTickets for help on using tickets.