Viewing 1 replies (of 1 total)
  • anonymized-17692928

    (@anonymized-17692928)

    There’s a stray slash in the generated link, before “?action=rp”. Look for this line:

    $reset_link = '<a href="' . wp_login_url()."/?action=rp&key=$reset_key&login=" . rawurlencode($user_login) . '">reset your password</a>';

    Change it to:

    $reset_link = '<a href="' . wp_login_url()."?action=rp&key=$reset_key&login=" . rawurlencode($user_login) . '">reset your password</a>';

    No idea how this is still alive, no-one will be able to reset their passwords!

    • This reply was modified 4 years ago by anonymized-17692928.
Viewing 1 replies (of 1 total)
  • The topic ‘Broken password reset links in email’ is closed to new replies.