Reset link doesn’t work (INVALID KEY)

Hello @samtyurenkov,

Thanks for writing here.

I tried to reproduce this issue on our side but failed. Could you please create support here with your site details? I will be happy to help you.

Mahbubur,

Check this thread and their site:
https://www.ads-software.com/support/topic/forgot-password-26/

If you visit his link, try to register and reset password you will see the same problem as I described.

https://i.gyazo.com/d750bc9b9ba6363f5ff1dede9ce1e823.png

buenas tardes, no me deja ingresar a mi editor y nunca me llega el correo para restablecer,me pueden ayudar porfavor

• This reply was modified 6 years, 9 months ago by janav922.
• This reply was modified 6 years, 9 months ago by janav922.
• This reply was modified 6 years, 9 months ago by janav922.
• This reply was modified 6 years, 9 months ago by janav922.

Hello @samtyurenkov,

We did not notice the reset password issue on all site but some specific site. Could you please help us by providing your site details here. We will be happy to fix it for you.

@janav922, Please make sure that your mail server works fine, also the email may locate in the spam folder. Let me know the updates.

Thanks

Mahbubur,

I won’t give my site details, but I can tell what I found:

I went to phpmyadmin and found user_activation_key meta field. Some of them were empty, some with short 20digit hash, some with long hash with numbers and special characters.

I checked your code and found function that checks $key and $login. If empty – it generates a new hash. SO your function worked for none or short keys, but not for long keys.

If I manyally delete long hash – I can restore the password.

Now the question, what generates long hash, which function? How can I stop it

Hi @samtyurenkov,

Thanks for your valuable info on the issue, I was able to reproduce the issue and it is already fixed for our next release.

You can see the code changes here.
Commit

We will release an update as soon as possible with this fix, meanwhile you can use our develop version from here. If you need the fix urgently.

Thanks again and let us know if you find anything else to improve. We are always looking for your suggestions to make our plugin better for you.

With Best Regards
Rafsun

Rafsun,

Thanks for the info. I also have the business version of the plugin, and I saw login.php there. Does it affect it as well?

@samtyurenkov,

Yes, we had another similar class in the PRO version as well but don’t worry as that one will be deprecated from next version. Things should work fine even if you only update the Free version.

Thanks