WordPress.org

Make WordPress Core

Opened 14 months ago

Closed 14 months ago

Last modified 14 months ago

#47073 closed defect (bug) (duplicate)

Lost Password generates invalid link in user email

Reported by: lcwakeman Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Login and Registration Keywords:
Focuses: Cc:

Description

When a user asks to reset their password, the link generated by wp-login.php is invalid. This is in all releases since at least 5.0 and is in the latest nightly build.

wp-login.php line 390 of latest build is:

$message .= '<' . network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . ">\r\n";

S/B:

$message .= network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . "\r\n";

Change History (6)

#1 @natereist
14 months ago

@lcwakeman Welcome!

Why do you feel the link generated is invalid? That link has been that way for quite a while, can give some more detail about the bug you are seeing?

#2 @lcwakeman
14 months ago

When the link is clicked, instead of the change password form an error displays

#3 @natereist
14 months ago

In trying to replicate the issue described, everything seems to work for me as expected on WordPress 5.1.1. Does the error give any more information?

Couple other questions:
Is your mail message plain text or HTML?
Are there any plugins ( or theme functions ) that would manipulate the login password reset email?

#4 @ocean90
14 months ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Severity changed from major to normal
  • Status changed from new to closed
  • Version 5.0 deleted

Hello @lcwakeman, welcome to WordPress Trac!

We're already tracking this issue in #44589. See also #23578 and #43206.

#5 @lcwakeman
14 months ago

Is your mail message plain text or HTML? Plain text

Are there any plugins ( or theme functions ) that would manipulate the login password reset email? That may be a possibility. On the site I am having problems with I am using Login With Ajax. I will do a little more checking and get back.

#6 @SergeyBiryukov
14 months ago

  • Component changed from General to Login and Registration
Note: See TracTickets for help on using tickets.