sscott1

Hi @missveronicatv I solved the problem by 1) upgrading WordPress, 2) installing the latest version of Ultimate Member (2.5.1?) 3) upgrading the database, 4) calling WP Engine and adding [Login, Register, Password Reset, Account, User, Members] to the cache exclusion list.

One issue I had was this step:
Add the Landing Page slug to your UM Settings -> Access -> Restriction Content -> Exclude the following URLs and click “Add new URL”

That is not an option on my version of UM

We are trying to troubleshoot an old version of UM v2.1.9. Tried applying your GitHub fix. Still getting the invalid key error. It worked once for some reason, but not again.

• This reply was modified 2 years, 2 months ago by sscott1.
• This reply was modified 2 years, 2 months ago by sscott1.

@delaitec very promising. I am trying to do the exact thing you are.

I copied and pasted the code to functions.php and rss-myfeed.php (removed the worldnews filter).

But I get a 404 error. The feed is not rendering after clearing my cache and restarting wp. I am navigating to /feed/myfeed

EDIT: I solved it by going to Settings > permalinks > Save Changes as per this article:
https://kb.wprssaggregator.com/article/219-how-to-create-custom-rss-feeds

• This reply was modified 4 years ago by sscott1.

Ok, I was unable to reset the password using the dev environment by recycling the plugins. I get the following message in the URL:

https://nycrulesdev.wpengine.com/admin-portal?action=lostpassword&error=invalidkey

Ok, I was able to get the password reset to work in staging as mentioned before. But I am still unable to get 2FA reset password to work. I have disabled all plugins and reverted to the latest Twenty Twenty theme.

In staging I was able to get it to work by disabling the plugins and re-enabling them. Simply turning them off and on again got it to work. I will get back to you once this is complete in production (tomorrow).

Below is a screenshot once I click on the link sent by defender.

Screenshot of invalid link.

“Your password reset link appears to be invalid. Please request a new link below.”

Please keep the thread open. I am testing some things now to try to isolate.

What does it mean that I am receiving emails from other sections of my app and not Defender? For example, when someone posts a comment I get an email to accept the comment.

Note I DO receive the email with the reset code, but when I enter that code it denies access from the automatically generated code. This happens for device resets and password resets.

• This reply was modified 4 years, 4 months ago by sscott1.

Yes they were able to add the headers on their end. Thank you for your support.

I was using WP Engine. It seems they strip out the headers and replace it with their own. In order to get the headers to work I had to ask WP Engine to insert them on their end (NGINX).

Ah server-side caching. That might be it. Let me work on it and I will report back the results.