Search field on landing page, letting non-members inside

[divagrrl27]

So I think this may be a theme- or BP-related issue, but I figured I'd check here, too, since s2Member sets the home page as the "Membership Options" page.

I have a search field appearing in the upper right of that page, and just discovered that performing a search takes you RIGHT INSIDE THE SITE! Non-members have access to everything!

Granted, the navigation menus are hidden, but with all the text links everywhere, they can get all over the site.

I doubt this is currently being abused, I'm not exactly a traffic superhighway, but still, the lock is broken and I'd like to figure out how to fix it!

Thanks for any help you can offer.

Melissa

[Eduan]

Have you tried this video?:
http://www.s2member.com/content-restric ... ble-video/

[divagrrl27]

Just watched it. Very interesting and useful, but it has nothing to do with my problem.

There's a search field that seems to be automatically set to appear. I did not place it on the Membership Options page -- it is automatically showing up, and I have no idea how to get rid of it.

A search in that search field takes the viewer INSIDE the site, to the member home page (which I've set to the BuddyPress "Activity" page). This should be protected content, ONLY viewable to paid members.

This may be a BuddyBoss (theme) or BuddyPress (social network plugin) issue, but I'm looking into all possibilities!!

I'm attaching before and after screenshots, showing the Membership Options page with the unwanted search field (before) and what shows up after the search. Does the screenshot make it more clear what the problem is?

Thanks,
Melissa

Membership Options page, showing unwanted search from

Member home page (set to be BuddyPress "Activity" page), which should only be available to paid members!

[divagrrl27]

BTW, on the suggestion of tech support over at the BuddyBoss forum, I tried putting a blank text widget in the sidebar. That only made a blue field appear below the search field.

Blank widget showing up as blue field below the search form

Question: which file does s2Member put the search field in? And is it possible to set it to NOT appear on the Membership Options page, but to appear in all the other places it normally does?

THAT'S what I'm really hoping to accomplish.

[Bruce C]

Hi,

s2Member does NOT put a search bar at the top of any page. It would appear that it is a BuddyBoss feature (just checked.. definitely is check http://buddyboss.com/demo/blog/), and the non-protection of the page is a BuddyPress issue.

To protect the page, I would try playing around in Dashboard ->s2Member->Restriction Options, and more specifically, the URI Restrictions. Perhaps blocking the page again through the URI restrictions will solve the problem.

In order to get rid of the search form, here's what I would do:

1. Go to /wp-content/themes/buddyboss/_inc/css/default.css file in the theme and enter

Code: Select all

#searchform {
    display: none;
}

That will get rid of the search bar.

Hope that helps!

[divagrrl27]

Thank you Ace! Tried this, but it didn't do anything.

Discovered an even bigger problem in the meantime: the Membership Signup page is also showing a "Signup" button at the top right, and I just successfully registered as a test user, gaining COMPLETE LEVEL #4 ACCESS for free!

Ack! Help!

[Bruce C]

I sent you a PM.

[divagrrl27]

More data: I just opened Safari, and the search form is NOT appearing there. It IS appearing when I go to the home page in Chrome and Firefox.

Haven't received your PM yet..

[Bruce C]

That may have something to do with your browser cache. The display:none; property is not Safari exclusive.

[divagrrl27]

Yet more data: The Signup button has disappeared, and I haven't been able to reproduce it. (Good news, except that now I'm living in a state of constant anxiety about whether it will randomly appear again 8-])

Also, when I registered a test account via the randomly-appearing signup button, it signed up up to the AWeber list associated with a Level #3 membership.

For what it's worth...

[divagrrl27]

Interesting... I just cleared my cache in Firefox, and the search form went away!

Do you think this was just happening on my machine..??

[divagrrl27]

Tried it in Chrome, too, and search form GONE!

[Bruce C]

Yes, just your computer. It is gone for me also.

[Bruce C]

Are you using s2Member Free, or s2Member Pro?

Also, are you using One-Time-Offers, or any conditionally-available upgrade buttons?

[divagrrl27]

I have created one-time PAYMENT buttons, is that what you mean? (Ie, for non-recurring payments)

I have not created any upgrade buttons. I'm not even sure what a conditionally-available upgrade button is. :-}

[Bruce C]

If you don't know what it is, then it shouldn't be a bother.

However, I would still check the contents of that page for any unwanted code that you may have accidentally placed there, just to make sure.

[Bruce C]

Just though of something. Do you have a php execution plugin installed

What may be happening is that somebody has attacked your website through Exec-PHP or another php plugin in a post, and created the button using some php code. It is a long-shot, but check your member's list for any users with outstanding membership levels, and if you are using Exec-PHP, check the table in the logs under Settings to make sure nobody's cheating.

Otherwise, it's probably just a glitch with something on your site.

[divagrrl27]

Uh, oh, that **** search form is appearing again! I keep trying cache clearing, but that isn't helping.

8-[

[Bruce C]

It looks as though the code I gave you is no longer there. Can you check the file again and see if it's still there please?

Also, it you have a caching plugin installed in your wordpress setup, try clearing that.

[divagrrl27]

Ah! Looks like that fixed it (fingers crossed..) I'd removed that code, thinking it wasn't necessary (since it didn't seem to help at first, and since BuddyBoss encourages a protocol of only editing the child theme, not the main theme.

There's no default.css file in the child theme, though. If I add that code to custom.css in the child theme, do you think that will work?

[Bruce C]

Yea, I think it would work, since BuddyBoss should link to that stylesheet if it's meant to be customized.