Make WordPress Core

Opened 9 years ago

Closed 9 years ago

Last modified 9 years ago

#35255 closed defect (bug) (invalid)

Password Reset URL doesn't include period '.' character in username

Reported by: haveanepiphany's profile HaveAnEpiphany Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.6
Component: Users Keywords:
Focuses: administration Cc:

Description

This one is unexpected, because I don't usually use punctuation in usernames, but I just was assigned a user account by a friend of mine on a site he controls.

When the "Your username and password info" email arrived, I clicked the link to set my password, and received the Your password reset link appears to be invalid. Please request a new link below. error.

Requesting a new password via email resulted in the password email arriving, and when I clicked the link in it, I received the same error.

On closer inspection, my username contained a . (period) character. In fact, it was the final character in the username.

When I looked at the URLs in the two emails I received, I noticed that the final character (the . or period) was stripped from the password reset link, which invalidated it.

I was able to reset my password by copying and pasting the link, then adding the . character to the end before continuing.

Change History (5)

#1 @swissspidy
9 years ago

Which email client are you using?

I just tested this locally on a site running trunk, and the link correctly included the username with the dot at the end.

#2 @HaveAnEpiphany
9 years ago

I'm using Gmail.

Interesting. I've just tested from another site to see if I can duplicate the error. The trailing dot does appear in the text, but when I copy the URL, it is missing. This happens in the Gmail web client in both Chrome and Firefox.

#3 @HaveAnEpiphany
9 years ago

OK I've just confirmed that this problem does not occur with the Thunderbird email client. I used an address that arrives in Thunderbird but is cc:d to Gmail and the Thunderbird link works correctly, while the GMail one does not.

So... barring some other method of forming this URL in a text-only email message, this is not a WordPress issue, but perhaps a Gmail one.

Apologies.

Last edited 9 years ago by HaveAnEpiphany (previous) (diff)

#4 @HaveAnEpiphany
9 years ago

  • Resolution set to invalid
  • Status changed from new to closed

#5 @dd32
9 years ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.