Reset password is broken since WP 4.3 (and solution)

  • Hi,

    Since WP 4.3, when user ask to reset his password, WP add timestamp to the key in database (in table users, column user_activation_key)

    So the key in database is something like that since 4.3 : “1445081427:$P$BEPd/ZqXqHrhhmbaWM2pYF4jEqz8Dz0”
    you can see time then : and finally key

    The plugin Ultimate Ajax Login doesn’t add the time in Database.
    so all link send by email are always wrong and user can’t reset his password.

    THE SOLUTION :

    Edit file “lib/class-ual-widget.php”
    replcace line 261
    $hashed = $wp_hasher->HashPassword( $key );
    by
    $hashed = time() . ':' .$wp_hasher->HashPassword( $key );

    Please update quickly ??

    https://www.ads-software.com/plugins/ultimate-ajax-login/

  • The topic ‘Reset password is broken since WP 4.3 (and solution)’ is closed to new replies.