Skip to content
This repository has been archived by the owner on Jul 7, 2020. It is now read-only.

Broken password reset links on WP 4.3.1 #3

Closed
ollietreend opened this issue Oct 26, 2015 · 4 comments
Closed

Broken password reset links on WP 4.3.1 #3

ollietreend opened this issue Oct 26, 2015 · 4 comments
Assignees

Comments

@ollietreend
Copy link

Hi,

Password reset links are broken when this plugin is activated. I'm running WordPress 4.3.1, but I imagine this will also affect other versions of WordPress.

This bug could have been caused by the changes that were made to account passwords and reset links in WordPress 4.3:

Password reset links now expire in 24 hours by default.

I haven't spent time looking into this, but imagine that this could have affected it.

Expected behaviour

  1. Enter username in to 'forgotten password' form.
  2. Receive email, click link.
  3. Change password using 'reset password' form.

Expected behaviour

## Acutal behaviour 1. Enter username in to 'forgotten password' form. 2. Receive email, click link. 3. "Your password reset link appears to be invalid. Please request a new link below."

Actual behaviour

@mallorydxw mallorydxw self-assigned this Oct 26, 2015
@mallorydxw
Copy link

They are aware of the bug: https://core.trac.wordpress.org/ticket/33904

Your options:

  1. Increase the size of the user_activation_key field in the wp_users table.
  2. Disable the plugin until WP fixes the bug.

Hopefully they'll fix it soon though.

@ollietreend
Copy link
Author

Understood – thanks @tomdxw.

@younes0
Copy link

younes0 commented Nov 2, 2015

meanwhile, you could make a bold statement about it in the docs. thanks

@mallorydxw
Copy link

WordPress 4.4 is out. And this bug is one of the many fixes.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants