raindrops: wrong forgot password reset link url

  • Resolved persistent

    (@persistent)


    8 years, 9 months ago

    No user can get a correct link in order to Reset a lost password. After doing everything except checking the theme, I finally changed the themes on sites that use Raindrops (none worked correctly I found) and all worked fine in 2016 or 2015 themes. (I even got down to zero plugins trying to troubleshoot and it didn’t work.)

    Only with Raindrops, the links in the email are incorrect having converted the actual ascii html number code for the ampersand itself, which should be only the actual ampersand mark itself (&), so they don’t work.

    When I backspace over the incorrect/appended ascii code (leaving the actual ampersand) before I hit GO on the url, it works fine.

    What might cause the theme to convert the ascii for the ampersand?

    Here is an example of the link received in the reset password email:

    <https://REDACTED/wp-login.php?action=rp&key=FGWuuLkfqH2LLcTYtkh2&login=webmaster2>

    <https://REDACTED/wp-login.php?action=rp&key=9TacC6D7x7H9F7b2i9rC&login=webmaster2>

    This is what you get as a url when it cycles endlessly back to the wp-login page with this now in the address bar:
    https://REDACTED/wp-login.php?action=lostpassword&error=invalidkey
    back to the login page again.

    The ascii converted to the ampersand above.
    It’s: & # 0 3 8 ; (wherever you see the & mark in the first and third urls).

Viewing 9 replies - 1 through 9 (of 9 total)
  • Thread Starter persistent

    (@persistent)

    The ascii converted to the ampersand. It’s: & # 0 3 8 ;
    &

    Great theme, by the way — thank you for that.

    Theme Author nobita

    (@nobita)

    Hi persistent

    Theme is not implement & # 0 3 8 ;

    This is core functionality.

    password reset link like below

    ｈｔｔｐ：／／ｅｘａｍｐｌｅ．ｃｏｍ／ｗｐ／ｗｐ－ｌｏｇｉｎ．ｐｈｐ？ａｃｔｉｏｎ＝ｒｐ＆ａｍｐ；＃０３８；ｋｅｙ＝＊＊＊＊＊＊＊＊＆ａｍｐ；＃０３８；ｌｏｇｉｎ＝＊＊＊＊＊

    This link url create in wp-login.php line: near 367

    $message .= __('To reset your password, visit the following address:') . "\r\n\r\n";
$message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";

    network_site_url function has filter.

    Single WordPress Site

    apply_filters( 'site_url', $url, $path, $scheme, $blog_id );

    Multi Site

    apply_filters( 'network_site_url', $url, $path, $scheme );

    By using these filters, I think that it is possible to replace a string of URL.

    Thank you.

    Thread Starter persistent

    (@persistent)

    Thank you nobita.

    I do not code php. I just noted that the url is only wrong using Raindrops theme. We switched to Raindrops about November last year and thought the problem a few were having was their system. But new members can’t get in because they cannot set a password, so one of the web people was just sending them a password.

    I am not sure how we can repair this issue without changing any core wordpress files? I replaced ALL the core files as part of troubleshooting.

    I see how it works above, but do not know why at all anything would make it convert the ampersand? But now what?

    Are you saying choose another site type – Network versus Single?

    Theme Author nobita

    (@nobita)

    I was examined whether the password reset link in the default theme has been output how the.

    There was a difference in the result output content.

    Whether the theme of the issue, I would like to investigate further.

    Take time to examine

    Theme Author nobita

    (@nobita)

    This is Raindrops bug

    Hot Fix

    Please open lib/hooks.php line 400

    add_filter( 'site_url','esc_url');

    above code change like below( commentout )

    //add_filter( 'site_url','esc_url');

    https://github.com/tenman/raindrops/blob/master/lib/hooks.php#L400

    This bug will fixed next version of Raindrops

    Sorry for wrong response

    Thank you.

    Thread Starter persistent

    (@persistent)

    Thank you very much, nobita.

    I appreciate all the work and consideration – especially since it just updated this evening as well.

    I will attempt it and await the fix in a formal update.

    We do like your theme.

    Theme Author nobita

    (@nobita)

    Raindrops 1.411 now live, Please check issue.

    Thank you.

    Thread Starter persistent

    (@persistent)

    Appears to work perfectly.

    Thank you again!

    All sites updated and tested.

    Theme Author nobita

    (@nobita)

    Thank you for reply!

    Change to resolved this post

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘raindrops: wrong forgot password reset link url’ is closed to new replies.