We have the same problem. Lost Password is not working. We have a newly installed WP 3.8.1 multisite installation with TML.
I had to hack TML to get Lost Password to work. IMO, the procedure to retrieve/update the user_activation_key must have changed in a previous version of WP but TML did not update their code base; hence Lost Password functionality is broken.
I had to modify about 10 lines in theme-my-login/includes/class-theme-my-login.php.
can you please share your 10 lines code here so the developer can fix it right away on next release?
Here are the changes I made to get TML Lost Password to work with WP 3.8.1.
Disclaimer: My changes only work with WP 3.8. If you apply these changes on an earlier WP version, you may break the Lost Password functionality.
theme-my-login/includes/class-theme-my-login.php
line 308
- $user = self::check_password_reset_key( $_REQUEST['key'], $_REQUEST['login'] );
+ $user = check_password_reset_key( $_REQUEST['key'], $_REQUEST['login'] );
line 1042
+ $key = '';
line 1047
- $wpdb->update( $wpdb->users, array( 'user_activation_key' => $key ), array( 'user_login' => $user_login ) );
+ if ( empty( $wp_hasher ) ) {
+ require_once ABSPATH . 'wp-includes/class-phpass.php';
+ $wp_hasher = new PasswordHash( 8, true );
+ }
+ $hashed = $wp_hasher->HashPassword( $key );
+ $wpdb->update( $wpdb->users, array( 'user_activation_key' => $hashed ), array( 'user_login' => $user_login ) );
First, let me say a big thank you.
I can do a little bit of PHP coding but I wouldn’t have figured this out.
I wanted to ask you if you could expand on what to do with line 1042. I actually already have code on that line. Lines 1041 to 1043 are as follows (I checked that I hadn’t accidentally deleted a line of code and thrown off the numbering. This is how my document opens):
`$key = $wpdb->get_var( $wpdb->prepare( “SELECT user_activation_key FROM $wpdb->users WHERE user_login = %s”, $user_login ) );
if ( empty( $key ) ) {
// Generate something random for a key…`
Where would I put your code?
Again, a big thank you.
Oh, I forgot to answer your question. Yes, we are using 3.8.1. Upgrading to this WordPress version appears to have triggered the problem.
Sorry Line #1042 is confusing but was the minimal amount of change. The code should look like this:
$key = $wpdb->get_var( $wpdb->prepare( "SELECT user_activation_key FROM $wpdb->users WHERE user_login = %s", $user_login ) );
$key = '';
if ( empty( $key ) ) {
// Generate something random for a key...
My addition is in the middle, which essentially makes key empty.
It probably wasn’t confusing to others.
Thank you for walking me through that.
It all worked perfectly.
I am so impressed.
Thank you.
@jkhongusc .. I tried to follow your directions (I am a PHP neophyte) when I look at the line numbers for the class-theme-my-login.php file, they do not have the same code as you mention here on your post. What am I missing? I have the correct file open, I know that much. I can find these lines of code:
– $user = self::check_password_reset_key( $_REQUEST[‘key’], $_REQUEST[‘login’] );
+ $user = check_password_reset_key( $_REQUEST[‘key’], $_REQUEST[‘login’] );
but on different line numbers..
This line: (which is apparently supposed to be 1042)
+ $key = ”;
is not in the php file at all after doing a search for it. Any suggestions?
onakublogger:
– means remove that line of code
+ means to add a new line
line #1042 is a new line of code which you need to add; so you cannot find it in the file. I posted above what the line #1042 looks like when you add it to the file.
After changes in this file
theme-my-login/includes/class-theme-my-login.php.
The form “Set password” is appeared but password not changed.
I’am set up new password and after entering this new password plugin tels me next:
Error: Entered (new) password for user.. is wrong!
still not working… make changes like you said and just taking a mail, but its not give new password or code to change it.
Also change line #1060 to:
$message .= network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . "\r\n";
and it should working, if still not make this same with wp-login.php at line #364:
$message .= network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . "\r\n";
Tell me if it helps anyone?
Excuse me Kraha,
Do you mean wp-login.php, the core file?… I tried jkhongusc’s code, but nothing happened… So I tried your solution. Nonetheless, I woud rather not touch core files…
Thanks to everybody!!!
I mean, I only modified 1060 line with no results.
