GDPDR email confirmation link redirects with no params
-
Description: In “admin->tools->export personal data” I send email to the user asking them to verify the request. User receives the request with the link:
https://www.example.com/login/?action=confirmaction&request_id=131&confirm_key=FQVs6ymNj6AQgcLSOIX5
When following the link the page redirects to:
…and shows text “Invalid request.”.
Environment: WordPress 4.9.8, with only two plugins: Theme My Login 7.0.1 and WP Mail SMTP 1.3.3; and Twenty Sixteen theme.
Comment:
I observe that “/includes/actions.php” file line 622 calls ‘wp_die’ because all GET request parameters have disappeared after the redirect.
If I substitute “/login/?” with “/wp-login.php” in the email link like this:
https://www.example.com/login/?action=confirmaction&request_id=131&confirm_key=FQVs6ymNj6AQgcLSOIX5
then request completes as expected, except obviously without rendering via TML template.
- The topic ‘GDPDR email confirmation link redirects with no params’ is closed to new replies.