Hi Rob –
I went crazy trying to figure out this problem, and it turns out that it has to do with caching, as the author of TML has noted in other threads.
I fixed the issue by excluding the Theme My Login directory from caching. I am not an expert in this, but my layperson’s interpretation is that, if the login or reset password page is being cached, it is not the “real” or fresh page that needs to be used in order to reset a password, or login with a password that has been reset.
We use a Sucuri firewall, which caches all the pages on our website. Now that the whole directory of TML has been excluded, it means that a fresh login or reset password page is generated whenever the link is clicked or the URL is used.
(For any Sucuri users — you can exclude a directory by going to the “NON-CACHE URLS” section of the Performance Settings (under the “Performance” tab on your dashboard. Just a note – after I did this, I encountered a difficulty where the site did not load (timed out) after resetting a password. It did this to several other users as well. Then a Sucuri tech told me it had to do with too many pending queries or something, cleared something out, and then it hasn’t happened since. This might have had something to do with propagating the changes made in excluding the TML directory from caching, not sure.)
Maggie
https://www.npsa-association.org
-
This reply was modified 7 years, 9 months ago by MaggieZ.