"Your password reset link appears to be invalid. Please request a new link below."

[shawnhooper]

Hi Jeff,

I'm testing this beta against:

• WordPress 4.3 (Release)
• Twentyfifteen Theme
• Theme My Login Beta Plugin
• wpmandrill (plugin)

I can request my lost password e-mail. I can click on the recovery link in the e-mail, and get the change password screen. When I submit that, I get:

"Your password reset link appears to be invalid. Please request a new link below."

What could I be missing? Thanks in advance for your help, it's very much appreciated !

[jfarthing84]

Could you temporarily disable other plugins and try again?

[shawnhooper]

The only other plugin is wpmandrill which overrides wp_mail. I can't disable it, or I won't get the e-mail message in the first place. My servers have no built-in mail capability.

[jfarthing84]

Could I possibly test? You can send credentials here.

[goredshift]

I have updated to the Beta as well. With 6.3 and the 6.4 plugin installed no errors are generated but the password reset did not work still for me. When I removed 6.3 and went only with the beta a Fatal error was generated and the plugin would not activate.
Thanks
GL

[jfarthing84]

Well, you definitely can't have boh active! You have to rename the beta directory to "theme-my-login".

[goredshift]

ok.. That makes sense. Thanks.

[KenPixelMii]

Using 6.4 on WordPress 4.3.1 using Divi theme;
Reset password, email link works, new password chosen, back to login screen (enter new credentials) - [ISSUE STARTS HERE] I am in fact logged in but the page shows the invalid link error (see img). For our non-admin users we are hiding the admin bar so they don't know they are logged in unless they happen to see that Login has changed to Log Out in the nav.

[jfarthing84]

It appears to be redirecting you back to the referer. Are you using the Custom Redirection module?

[goredshift]

Hey. Not sure how I got on this thread but it doesn’t seem to relate to me. Good luck with the solution though!

Peace,
Glenn

Tel: 205.614.3001 | glenn.lewis@thinkred.co mailto:glenn@thinkred.co | Follow me on Facebook http://www.facebook.com/goredshift | www.thinkred.co http://www.thinkred.us/

The information contained within the referenced, linked, or directed email communication is intended to be a confidential communication between the original sender and recipient, and is to be treated as confidential. All works, ideas, or copy within are copyrighted by Red Shift Creative, LLC., and are not to be used in any manner other by which they were intended by Red Shift Creative, LLC. If you believe you have received this or any other email in error, please contact postmaster@goredshift.com mailto:postmaster@goredshift.com

On Sep 23, 2015, at 7:20 AM, Jeff Farthing notifications@github.com wrote:

It appears to be redirecting you back to the referer. Are you using the Custom Redirection module?

—
Reply to this email directly or view it on GitHub #7 (comment).

[KenPixelMii]

Thanks Jeff,

I was using Custom Redirection and the referer setting. I guess I didn't recall in the past where the referer setting would effect password resets. I've updated the settings to custom location (home page) for now. Curious if there is a way I can still use "referer" without causing the invalid link on password resets.

[jfarthing84]

@KenPixelMii Can you open a new issue for yours? I'm going to assume @shawnhooper's issue was fixed with the 6.4 release.

[shawnhooper]

Hi @jfarthing84 -

Sorry, I only got back to this issue today. Yes, 6.4, along with a fix to my theme resolved this issue. Thanks for the new version!

Cheers.

[alexmigf]

Hi,

I'm using the last version of the Plugin and Wordpress, and without switching off the redirections the key doesn't work.

[jfarthing84]

@alexmigf It sounds like you may be experiencing #27.

[alexmigf]

Yes, i will add redirects to functions.php and leave this option off.

[johnvlittle]

We also have this issue. Every user is locked out, noone can reset their passwords. This seems like a pretty serious bug - in 20 years we have never seen this with any other system.
If it is a cache issue, How exactly does one disable cache? Is this at the ISP, server or wordpress level? Please give a non-tech answer.