[wp-trac] [WordPress Trac] #29060: Don't pass around the resetpass key

[WordPress Trac]

#29060: Don't pass around the resetpass key
------------------------------------+---------------------
 Reporter:  nacin                   |       Owner:  nacin
     Type:  defect (bug)            |      Status:  closed
 Priority:  normal                  |   Milestone:  4.0
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:  fixed
 Keywords:                          |     Focuses:
------------------------------------+---------------------

Comment (by SergeyBiryukov):

 Should we check if `$_COOKIE[ $rp_cookie ]` is set?

 I see warnings if I visit `wp-login.php?action=rp` directly:

 {{{
 Notice: Undefined index: wp-resetpass-... in wp-login.php on line 571
 Notice: Undefined offset: 1 in wp-login.php on line 571

 Warning: Cannot modify header information - headers already sent by
 (output started at wp-login.php:571) in wp-login.php on line 576
 Warning: Cannot modify header information - headers already sent by
 (output started at wp-login.php:571) in wp-includes\pluggable.php on line
 1173
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29060#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform