WordPress.org

1. dciso
   Member
   Posted 5 months ago #

   Using WordPress 3.2.1 and Theme My Login 6.1.4 I noticed the password reset was broken (gives an invalid key error), I thought I would share how I fixed this:

   See /plugins/theme-my-login/templates/resetpass-form.php OR edit the 'resetpass-form.php' inside your theme folder if you've copied across already.

   Find:
   

   <input type="hidden" name="key" value="<?php $template->the_posted_value( 'key' ); ?>" />
   <input type="hidden" name="login" id="user_login" value="<?php $template->the_get_value( 'login' ); ?>" />

   Replace With:
   

   <input type="hidden" name="key" value="<?php echo esc_attr($_GET['key']) ?>" />
   <input type="hidden" name="login" id="user_login" value="<?php echo esc_attr($_GET['login']); ?>" />

   Hopefully it saves somebody a few minutes trying to find the problem.
   Jason

   http://wordpress.org/extend/plugins/theme-my-login/

2. Jeff Farthing
   Member
   Posted 5 months ago #

   Interesting, since all Theme_My_Login_Template::the_posted_value() does is return from the $_REQUEST array.

Reply

You must log in to post.