Lost Password generates invalid link in user email

[lcwakeman]

When a user asks to reset their password, the link generated by wp-login.php is invalid. This is in all releases since at least 5.0 and is in the latest nightly build.

wp-login.php line 390 of latest build is:

$message .= '<' . network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . ">\r\n";

S/B:

$message .= network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . "\r\n";

[natereist]

@lcwakeman Welcome!

Why do you feel the link generated is invalid? That link has been that way for quite a while, can give some more detail about the bug you are seeing?

[lcwakeman]

When the link is clicked, instead of the change password form an error displays

[natereist]

In trying to replicate the issue described, everything seems to work for me as expected on WordPress 5.1.1. Does the error give any more information?

Couple other questions:
Is your mail message plain text or HTML?
Are there any plugins ( or theme functions ) that would manipulate the login password reset email?

[ocean90]

Hello @lcwakeman, welcome to WordPress Trac!

We're already tracking this issue in #44589. See also #23578 and #43206.

[lcwakeman]

Is your mail message plain text or HTML? Plain text

Are there any plugins ( or theme functions ) that would manipulate the login password reset email? That may be a possibility. On the site I am having problems with I am using Login With Ajax. I will do a little more checking and get back.