Ticket #22328: wp-login.2.diff

wp-login.php

@@ -228 +228 @@
                 // Now insert the new md5 key into the db
                 $wpdb->update($wpdb->users, array('user_activation_key' => $key), array('user_login' => $user_login));
         }
+        $reset_url = network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login');
+
         $message = __('Someone requested that the password be reset for the following account:') . "\r\n\r\n";
         $message .= network_home_url( '/' ) . "\r\n\r\n";
         $message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
         $message .= __('If this was a mistake, just ignore this email and nothing will happen.') . "\r\n\r\n";
         $message .= __('To reset your password, visit the following address:') . "\r\n\r\n";
-        $message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";
+        $message .= '<' . $reset_url . ">\r\n";
 
         if ( is_multisite() )
                 $blogname = $GLOBALS['current_site']->site_name;
@@ -245 +247 @@
         $title = sprintf( __('[%s] Password Reset'), $blogname );
 
         $title = apply_filters('retrieve_password_title', $title);
-        $message = apply_filters('retrieve_password_message', $message, $key);
+        $message = apply_filters('retrieve_password_message', $message, $key, $reset_url);
 
         if ( $message && !wp_mail($user_email, $title, $message) )
                 wp_die( __('The e-mail could not be sent.') . "<br />\n" . __('Possible reason: your host may have disabled the mail() function...') );