WordPress.org

Make WordPress Core

Opened 3 months ago

Closed 3 months ago

Last modified 3 months ago

#47073 closed defect (bug) (duplicate)

Lost Password generates invalid link in user email

Reported by: lcwakeman Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Login and Registration Keywords:
Focuses: Cc:

Description

When a user asks to reset their password, the link generated by wp-login.php is invalid. This is in all releases since at least 5.0 and is in the latest nightly build.

wp-login.php line 390 of latest build is:

$message .= '<' . network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . ">\r\n";

S/B:

$message .= network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . "\r\n";

Change History (6)

#1 @natereist
3 months ago

@lcwakeman Welcome!

Why do you feel the link generated is invalid? That link has been that way for quite a while, can give some more detail about the bug you are seeing?

#2 @lcwakeman
3 months ago

When the link is clicked, instead of the change password form an error displays

#3 @natereist
3 months ago

In trying to replicate the issue described, everything seems to work for me as expected on WordPress 5.1.1. Does the error give any more information?

Couple other questions:
Is your mail message plain text or HTML?
Are there any plugins ( or theme functions ) that would manipulate the login password reset email?

#4 @ocean90
3 months ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Severity changed from major to normal
  • Status changed from new to closed
  • Version 5.0 deleted

Hello @lcwakeman, welcome to WordPress Trac!

We're already tracking this issue in #44589. See also #23578 and #43206.

#5 @lcwakeman
3 months ago

Is your mail message plain text or HTML? Plain text

Are there any plugins ( or theme functions ) that would manipulate the login password reset email? That may be a possibility. On the site I am having problems with I am using Login With Ajax. I will do a little more checking and get back.

#6 @SergeyBiryukov
3 months ago

  • Component changed from General to Login and Registration
Note: See TracTickets for help on using tickets.