#35255 closed defect (bug) (invalid)
Password Reset URL doesn't include period '.' character in username
Reported by: |
|
Owned by: | |
---|---|---|---|
Milestone: | Priority: | normal | |
Severity: | normal | Version: | 4.6 |
Component: | Users | Keywords: | |
Focuses: | administration | Cc: |
Description
This one is unexpected, because I don't usually use punctuation in usernames, but I just was assigned a user account by a friend of mine on a site he controls.
When the "Your username and password info" email arrived, I clicked the link to set my password, and received the Your password reset link appears to be invalid. Please request a new link below.
error.
Requesting a new password via email resulted in the password email arriving, and when I clicked the link in it, I received the same error.
On closer inspection, my username contained a .
(period) character. In fact, it was the final character in the username.
When I looked at the URLs in the two emails I received, I noticed that the final character (the .
or period) was stripped from the password reset link, which invalidated it.
I was able to reset my password by copying and pasting the link, then adding the .
character to the end before continuing.
Change History (5)
#2
@
9 years ago
I'm using Gmail.
Interesting. I've just tested from another site to see if I can duplicate the error. The trailing dot does appear in the text, but when I copy the URL, it is missing. This happens in the Gmail web client in both Chrome and Firefox.
#3
@
9 years ago
OK I've just confirmed that this problem does not occur with the Thunderbird email client. I used an address that arrives in Thunderbird but is cc:d to Gmail and the Thunderbird link works correctly, while the GMail one does not.
So... barring some other method of forming this URL in a text-only email message, this is not a WordPress issue, but perhaps a Gmail one.
Apologies.
Which email client are you using?
I just tested this locally on a site running trunk, and the link correctly included the username with the dot at the end.