BuddyPress Security Issues

[James]

BuddyBoss Team,

I’ll preface this by saying that I know you are available for hire and that BuddyPress security is not a matter to be addressed by your theme. But you guys seem helpful so I’m looking for some general feedback.

I’m wondering if I’m the only BP admin hungry for a solution to enforce strong (or medium) passwords on the normal BuddyPress registration process. Google has taken me down a bunch of blind alleys, and I’ve tried a variety of methods to redirect logins to the standard WP login, but then we’re sending passwords via email which seems crazy as well. Most importantly to me, the way your theme integrates perfectly with BP and the whole “end user experience” of native BP password control, it’s such a shame to have to botch it up with work-arounds.

So I’m running the new beta and yeah, it has the strength meter, but that’s no guarantee. I’m also using one of the gold standard security plugins, iThemes Security Pro, and they were very quick to throw their hands up to say their plugin just doesn’t work with BuddyPress for password enforcement.

In your experience, is their a practical way to enforce password strength within the normal BP registration and password-change interfaces?

I realize this isn’t your responsibility… I’m just hoping you might have some good ideas.

Thanks for the best BP theme I’ve used. AWESOME. And BuddyBoss Wall is killer. I love how you guys stick to a few things and do them REALLY well.

James

[Ben]

Doesnt s2member offer this? It’s a bit overkill, but hell, it’s a start.

[James]

Thanks for the idea, Ben… but yes, I’ve tried s2member and it didn’t enforce password strength; plus I run another membership plugin. But I appreciate the idea!

[Alyssa]

@jgwolfensberger now that BP includes the meter it shouldn’t be too difficult to program passowrd strength enforcement. I haven’t looked at the new features yet but I’m sure someone will figure this out soon.

[James]

Thanks, TJ.