Thread

Can you please tell me why when I make an edit here:

CP Home ›  Admin ›  Members and Groups ›  Member Profile Templates ›  Default ›  Public Member Profile

I don’t see any change to the Member Profile Templates?

Am I missing a step to publish the change or is there something else going on?

Thanks

THS,

1. Which version and build of EE are you using?
2. At CP Home ›  Admin ›  Members and Groups ›  Membership Preferences, what is set for Default Member Profile Theme?

We are trying to find a workaround to our unresolved issue here:

HELP! - New BlackHat Program Designed to Exploit EE Member Profiles

We are considering just removing links all together as this problem is getting progressively worse and it would appear that Expression Engine is not able to find a resolution and has now closed the thread.

Can you please tell me why when I make an edit here:

CP Home ›  Admin ›  Members and Groups ›  Member Profile Templates ›  Default ›  Public Member Profile

There is no change made to the Public Member Profile? Am I in the right place or is there an additional step that needs to be made to publish the change?

We are trying remove profile links all together as this seems to be what we are left with?

Please advise?

THS,

1. Which version and build of EE are you using?
2. At CP Home ›  Admin ›  Members and Groups ›  Membership Preferences, what is set for Default Member Profile Theme?

Answers:

1. EE 1.6.5
2. Default

We are trying to find a workaround to our unresolved issue here:

HELP! - New BlackHat Program Designed to Exploit EE Member Profiles

We are considering just removing links all together as this problem is getting progressively worse and it would appear that Expression Engine is not able to find a resolution and has now closed the thread.

THS, try inserting the following as the first line in the Public Member Profile template (before the opening table tag)

<h2>Test</h2>

Do you see the word ‘Test’ appear below the header? If not, also look at the page’s source code and search for ‘Test’ to see if it appears in there somewhere.

It does not appear in the page or source?

I am entering it here:

CP Home ›  Admin ›  Members and Groups ›  Member Profile Templates ›  Default ›  Public Member Profile

THS, two more questions:

1. What URL are you using when looking for changes to the template? (you can change your domain name if necessary)
2. Can you please list the folders that are inside /themes/profile_themes ?

Where do I find the folder you are speaking of:

2. Can you please list the folders that are inside /themes/profile_themes ?

THS, two more questions:

1. What URL are you using when looking for changes to the template? (you can change your domain name if necessary)
2. Can you please list the folders that are inside /themes/profile_themes ?

I found the directory you were referring to… answers below:

1. Any author listed here http://blog.thehumansolution.com/index.php/forums/

2. The only 2 files listed inside /themes/profile_themes are: Default [folder] & index.html

The Human Solution,

Sorry it wasn’t clear from your replies that it was the forum profiles you were referring to as opposed to the general site profiles.

Have you run through the suggestions in Lisa’s post? You still seem to have the default ‘member’ trigger word set. The suggestions in Lisa’s post would stop the bulk of this spam.

The Human Solution,

Sorry it wasn’t clear from your replies that it was the forum profiles you were referring to as opposed to the general site profiles.

Have you run through the suggestions in Lisa’s post? You still seem to have the default ‘member’ trigger word set. The suggestions in Lisa’s post would stop the bulk of this spam.

I’m not sure how it could have been unclear as to how this problem was manifesting itself when I gave very specific example pages of the problem in the beginning of my post here:

HELP! - New BlackHat Program Designed to Exploit EE Member Profiles

I had also included a link to the URL for the BlackHat site that details very specifically how exactly it automatically targets EE sites and “Forum Profile” pages, as well as an example of a “profile page” being spammed.

I will look into the ‘member’ trigger word, but given the automated nature of the software being used to spam EE sites and its obvious effectiveness, I have little faith that this alone will accomplish much. My understanding of the remaining options detailed in Lisa’s link to Fighting Registration Spam is that they would require us to upgrade to the newer version of EE, which we are not ready to do at this time. Currently 1.6.5

A true solution would be for EE to offer the implementation of noFollow for links in the Profile pages. This is very clearly defined in the link to the BlackHat site I previously sent as being the only reason for the spam software’s existence and the reason it targets only Expression Engine sites as they are considered extremely vulnerable due to the lack of this option.

- - - - -

That said,

I find this confusing and am uncertain why you closed our previous post when the issue remains unresolved and we are still discussing it here. I would appreciate continued help resolving the issue discussed earlier in this thread as it seems we have gotten off topic. Can someone please continue Brandon Jones’s efforts to help us resolve the issue specific to this thread as we have made every effort to answer his questions?

“Changes not taking effect to Public Member Profiles”

Thank you,

The Human Solution

Hi, THS - we like to keep posts on target; your previous post was about fighting registration spam - you have now moved on to modifying the templates yourself which is a new topic.

1.6.5 came out in October, 2008, since then there have been numerous bug fixes, and more importantly, security fixes.  It is absolutely important that you upgrade your site to 1.6.9 to keep it secure.

Please let us know when that is done, then we can continue helping you troubleshoot your member profile templates.