BuddyBoss Messages Admin

A BuddyPress tool for viewing messages

Description

By default, nobody can read a BuddyBoss private message unless it was sent or received by the current logged-in member.

Occasionally, there is a need to respond to member complaints about another member harassing them via abusive messages.

This tool allows site administrators to review the messages of any member. They can also delete Message Threads.

NOTE: There is no UNDO for delete operations.

It provides a wp-admin screen available via Tools > BuddyBoss Messages Admin.

Installation

1. Upload and Activate

Screenshots

1. Tool Screen

Frequently Asked Questions

Can messages be restored after they are deleted?

NO !

Changelog

2.7

• Feature: Added "See More" button to truncated message content in Recent Messages table
• Feature: Added modal window to display full message content when "See More" is clicked
• Improvement: Messages longer than 20 words now show a "See More" button for better readability
• Improvement: Modal includes full message content with proper formatting
• Improvement: Modal supports keyboard navigation (Escape key to close) and backdrop click to close
• Improvement: Removed subject column from Recent Messages table (subject lines not available in BuddyBoss theme)
• Improvement: Adjusted column widths in Recent Messages table - Content column now takes more space, From/To columns are narrower

2.6

• Feature: Added date range filter to default messages view with start date and end date inputs
• Feature: Increased default message limit from 10 to 100 messages
• Feature: Added date range display in messages table when filter is applied
• Feature: Added "Clear Filter" button to reset date range filter
• Feature: Added "Edit User" links next to usernames in FROM and TO columns for quick access to user edit pages
• Improvement: Updated "LAST 10 MESSAGES" heading to "RECENT MESSAGES" for better clarity
• Improvement: Fixed duplicate message entries by grouping messages and aggregating recipients (SQLite compatible)
• Security: Fixed critical SQL injection vulnerability in bpmt_get_user_data() function using prepared statements
• Security: Sanitized all $_GET and $_POST superglobal access throughout the plugin
• Security: Fixed XSS vulnerabilities by escaping all user-generated output in templates
• Security: Fixed nonce verification mismatch in bulk delete functionality
• Bug fix: Fixed assignment operator bugs (using = instead of ===) in pagination functions
• Bug fix: Fixed logic error in user input handling to properly support both numeric IDs and login names
• Bug fix: Fixed typo in error message placeholder (1% to %d)
• Bug fix: Fixed duplicate message entries appearing in messages table when messages had multiple recipients
• Code quality: Escaped all output variables in error messages
• Code quality: Replaced site_url() with admin_url() for admin URLs and added proper URL escaping

2.5

• fix XSS vulnerability

2.2

• improves multisite support by removing {$wpdb->prefix} from bpmt_get_user_data

2.1

• fix sumbmenu page bug for WP 5.3

2.0

• add support for bulk deletion

1.5

• bug fix re pagination

1.4

• Add default display of last 10 messages
• Added language file
• Tested with WP 5.1.1

1.3

• Tested with WP 4.7 and BP 2.7.2

1.2

• Allows selection of messages from Inbox or Sent box instead of only showing Inbox.

1.1

• Changes to readme.

1.0

• Initial release.

Upgrade Notice

2.7

• New feature: View full message content in a modal window by clicking "See More" on truncated messages.

2.6

• IMPORTANT SECURITY UPDATE: This release fixes critical SQL injection and XSS vulnerabilities. All users should update immediately.

2.1

• fix sumbmenu page bug for WP 5.3

2.0

• 6/5/2019
• add support for bulk deletion

1.4

• Add default display of last 10 messages
• Added language file
• Tested with WP 5.1.1

1.3

• Tested with WP 4.7 and BP 2.7.2

1.2

• Allows selection of messages from Inbox or Sent box instead of only showing Inbox.

1.1

• Changes to readme.

1.0