Password resets correctly but fails to login

PicciaNeri
(@piccianeri)

6 years, 3 months ago
Hi there, I’m having a problem with the password resets. I have looked at the forum and the previous thread on a similar issue in fact describes a different problem.

When a registered user clicks on password reset, the email with the link is received correctly. The reset works fine and the result is the ‘Success!’ message. The admin email receives the notification that a user has changed the password. So it looks as if at database level this is working.

However, when the user tries to log in with the new password, they get the ‘Oops!’ fail message and they can’t use the new password. The only way to reset the password is via the WP dashboard. This is extremely inconvenient.

I have already spoken to my host which is Flywheel and it can’t be anything on their end.

The set up is Astra Theme with LearnDash & relevant integrations (GF, Stripe), Beaver Builder, Beaver Themer, Ultimate Addons for BB – all up to date.

Any ideas? Many thanks.
- This topic was modified 6 years, 3 months ago by PicciaNeri.
The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)

Plugin Author Uncanny Owl
(@uncannyowl)

6 years, 3 months ago

Hmm… nothing stands out as being a possible cause. Is this something you’ve tested yourself too, just to make sure the password doesn’t have a trailing space or something else that could cause a deviation? Are passwords that you set from user profile pages in /wp-admin/ accepted on the login page? Have you tried swapping our Front End Login module with another login/password reset tool to see if it’s unique to our plugin?
Thread Starter PicciaNeri
(@piccianeri)

6 years, 3 months ago
I’ve tested and re-tested personally, and so have my users. Many times, I’m a fan of testing.

Yes, passwords that I set from user profile pages in /wp-admin/ are accepted on the login page – they are the only ones that are accepted.

No, I haven’t tried any other reset tool – can you suggest one I could use?
And do you mean another login page tool or specifically just a password reset tool?

Thanks for prompt reply btw!
- This reply was modified 6 years, 3 months ago by PicciaNeri.
Plugin Author Uncanny Owl
(@uncannyowl)

6 years, 3 months ago

That’s very strange… no-one else has reported anything else like that.

I’m afraid I don’t have a specific password front end tool in mind; there are lots. You could even use something like WooCommerce and password reset from the My Account page. I mentioned login only because many other login plugins also combine password reset and switching to one that does both would allow you to not lose the login capability while you’re testing a substitute. (And for that kind of testing, testing on a Flywheel Staging site to make sure you don’t interrupt users.)

We just haven’t seen this specific case reported before though and I’m not sure why it might be happening consistently in your environment.

Thread Starter PicciaNeri
(@piccianeri)

6 years, 3 months ago

I know, it’s so annoying to be singled out for a unique bug!

Thank you for your help. I will try some other way.
kenef
(@kenef)

6 years, 1 month ago
I second this issue. Currently, my admin users cannot login via the uncanny front-end login, and none of my users are able to reset their password. Just as @piccianeri described, the emails get sent and delivered just fine, users are able to type in a new password and reset it, but afterwards they’re not able to login. WordPress dashboard is the only way to reset the passwords. This issue goes away when I deactivate the uncanny toolkit and use /wp-admin for logins, but then so does the toolkit and my front end logins…

Through my research into this topic, I’ve found several people with this same issue, hit and miss. Some of the other occurrences of this issue that I read about were as far back as 8 months. Uncanny, do you have any plans to address this issue in the future?
- This reply was modified 6 years, 1 month ago by kenef.
Plugin Author Uncanny Owl
(@uncannyowl)

6 years, 1 month ago

We have never experienced anything similar on any site we support directly (once we exclude associated pages from caching), and without a valid test case where we can exclude caching or environmental conditions there’s nothing for us to address. We aren’t able to provide site-level support through the WordPress repository support channel, and of our thousands of users that have access to paid support through uncannyowl.com (which potentially allows us to access sites directly to investigate), none have raised a similar issue so that we could investigate and resolve it directly.

If you do use the Pro version of the Toolkit, please do raise a support ticket on our site so that we can investigate directly. It’s definitely not a global issue though, fewer than 0.1% of Toolkit users have reported anything similar and only through this channel, so it’s very difficult for us to trace it to anything related to our plugin.

kenef
(@kenef)

6 years, 1 month ago

Sounds good, I’ll create a support ticket in the Pro site. I read in another thread that Uncanny is aware of this issue and its related to “core” and that there would be an update soon, but that was 7 months ago. Can you share any truth to this? Here’s the thread, the last comment explains a core issue: https://wordpress.org/support/topic/adding-login-shortcode-hijacks-my-admin-login/

Plugin Author Uncanny Owl
(@uncannyowl)

6 years, 1 month ago

The message you linked to (the one at the very bottom that references core files) indicates that the user contacted LearnDash (not Uncanny Owl) and that LearnDash was making an update. I’m not aware of anything LearnDash might have done here or how it would affect our plugins.

kenef
(@kenef)

6 years, 1 month ago

Ahh I see. Thanks a ton for the fast replies Uncanny!

jayjay2011
(@jayjay2011)

5 years, 12 months ago

Can anyone shed any light on this as its happening to us?