Custom login link breaks password reset

Hi,

If you are using one of the Brute Force features to rename the login URL, you must use the URL with the secret word to reset your password. If you don’t you will see an error message displayed on the screen. Also, the email sent to your inbox will also have the correct reset link as long as the person resetting the password is an administrator with administrative privileges.

Let me know if the above makes sense to you.

Thank you

@mbrsolution thank you, it absolutely makes sense to me. I was looking for a plugin to 1) change login URL and 2) change password reset URL, but I could not find one yet. Do you have any idea how to change the password reset URL?

Hi,

Do you have any idea how to change the password reset URL?

What are you trying to achieve?

Thank you

@mbrsolution If the password reset URL must be the same as the login URL, I need to adapt the password reset URL.

Hi,

If the password reset URL must be the same as the login URL, I need to adapt the password reset URL.

This is done automatically by the aiowps settings. In other words, when you type the URL with the secret word the login widget will appear. When you move the mouse over the reset password link it will reveal the secret word as well in the url to reset the password.

Regards

• This reply was modified 4 years, 2 months ago by mbrsolution.

Hello @mbrsolution obviously it does not because:

1. I am going to https://www.mypage.com/lost-password/
2. Entering email adress and clicking the button
3. Receiving 404 error with URL: hwww.mypage.com/wp-login.php?action=lostpassword

As you can see, the pw reset URL is not changing automatically. What can now be done?

Hi, now I understand what you are trying to achieve.

When you enable one of the Brute features in our plugin the URL you mentioned above https://www.mypage.com/lost-password/ will not work anymore. The url that will work is https://www.mypage.com/secretword/?action=lostpassword.

Kind regards

Yeah exactly @mbrsolution
Maybe it is a problem with Buddypress because this URL does not change and is still the “wp-login” though it is overwritten with the secret word.

I did not know that you were using BuddyPress. There might be a setting in BuddyPress causing this issue.

Regards