[wp-trac] [WordPress Trac] #62485: Lost Password form action URL is not using wp_lostpassword_url

WordPress Trac noreply at wordpress.org
Thu Nov 21 05:31:42 UTC 2024


#62485: Lost Password form action URL is not using wp_lostpassword_url
------------------------------------+------------------------------
 Reporter:  talextech               |       Owner:  (none)
     Type:  defect (bug)            |      Status:  new
 Priority:  normal                  |   Milestone:  Awaiting Review
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:
 Keywords:  has-patch               |     Focuses:
------------------------------------+------------------------------

Comment (by parthvataliya):

 Nice catch @talextech!

 The {{{wp-login.php}}} file has a set of default actions that determine
 how the page behaves. If a request is made with an action outside of these
 defaults, the page redirects to the login page. The current list of
 default actions includes:
 {{{
 $default_actions = array(
     'confirm_admin_email',
     'postpass',
     'logout',
     'lostpassword',
     'retrievepassword',
     'resetpass',
     'rp',
     'register',
     'checkemail',
     'confirmaction',
     'login',
     WP_Recovery_Mode_Link_Service::LOGIN_ACTION_ENTERED,
 );
 }}}
 To resolve this issue, we need to either update the {{{$default_actions}}}
 array to include the desired custom actions or remove the
 {{{lostpassword_url}}} filter to prevent redirection.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62485#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list