[buddypress-trac] [BuddyPress Trac] #6637: Lost Password issue, always errors with 'expiredkey'

buddypress-trac noreply at wordpress.org
Wed Sep 30 18:50:16 UTC 2015


#6637: Lost Password issue, always errors with 'expiredkey'
-------------------------------+------------------------------
 Reporter:  16hands            |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  high               |   Milestone:  Awaiting Review
Component:  Component - Core   |     Version:  2.3.3
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |
-------------------------------+------------------------------
Changes (by boonebgorges):

 * keywords:   => reporter-feedback


Comment:

 Hi 16hands - Thanks for the report.

 I'm unable to reproduce the 'expiredkey' problem on a stock installation,
 though I know that this functionality changed in WP 4.3, so I believe that
 there's a real problem here.

 I'm a bit perplexed by the URL of the password reset: `resetpass`.
 WordPress doesn't use this kind of URL for password resets. Are you using
 a plugin that customizes your login process somehow? It appears that the
 Theme My Login plugin, among others, may use the `resetpass` token.

 I'm guessing that WordPress is expiring the key after a redirect, and that
 the redirect is being performed by a separate plugin.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6637#comment:1>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list