Ticket #34712: 34712.patch

wp-login.php

@@ -319 +319 @@
                 return $key;
         }
 
+        $reset_password_url = network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login');
+
+        /**
+         * Filter the reset password url
+         *
+         * @since 4.4.0
+         *
+         * @param string  $reset_password_url      Reset password url
+         * @param string  $key Password reset key
+         */
+
+        $reset_password_url = apply_filters( 'reset_password_url', $reset_password_url, $key );
+
         $message = __('Someone has requested a password reset for the following account:') . "\r\n\r\n";
         $message .= network_home_url( '/' ) . "\r\n\r\n";
         $message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
         $message .= __('If this was a mistake, just ignore this email and nothing will happen.') . "\r\n\r\n";
         $message .= __('To reset your password, visit the following address:') . "\r\n\r\n";
-        $message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";
+        $message .= '<' . $reset_password_url . ">\r\n";
 
         if ( is_multisite() )
                 $blogname = $GLOBALS['current_site']->site_name;