• Resolved bevancatalyst

    (@bevancatalyst)


    When any user clicks the password reset link in the email they receive after doing a restore password, the page appears to work normally but it just shows “Your new password is” but doesn’t show a password.

    This is used to work for some users but not others, but now seems to be for anyone trying to do a password reset. I’ve tried all the standard things like resaving the page with the shortcode, deactivating and reactivating the plugin. I’ve tried deactivating other plugins I thought might be conflicting, and have also tried disabling caching but none of those seem to do anything.

    It’s running the latest version of Clean Login and I’m at a loss for what to do next.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Javier Carazo

    (@carazo)

    I have just tested and it is working.

    We fixed making it safer some version ago.

    Thread Starter bevancatalyst

    (@bevancatalyst)

    We have the latest version installed (1.11.2) but still having this issue.

    Plugin Author Javier Carazo

    (@carazo)

    @bevancatalyst,

    New passwod is get from a transient and the GET parameter:

    $user_id = absint( $_GET['user_id'] );
    	$new_password = sanitize_text_field( get_transient( 'cl_temporary_pass_' . $user_id ) );

    If you take sometime in recover the password, transient will be lost.

    Thread Starter bevancatalyst

    (@bevancatalyst)

    Thanks Javier, we aren’t taking time, I’m just requesting the password reset and clicking the link within a minute and it just shows nothing.

    Plugin Author Javier Carazo

    (@carazo)

    @bevancatalyst,

    Sorry for the delay answering. I have made another tests and all work correctly.

    Maybe have you got some kind of cache that is interferring?

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Password Reset Link – Page shows no password’ is closed to new replies.