New user registration / login loop – invalid key – step by step details

  • Hi!
    I’ve setup a WP site that I’m trying to use as a private intranet.
    Typical story- everything was working fine and then all of a sudden…

    As of a test a few days ago, there is a weird loop for new users. Self registration is disabled, therefore, the only other way to add people is through an import plugin.

    I’d love to understand where to start looking- I say that after fairly exhaustive googling where I found a handful of similar complaints, but old dead threads with no resolutions.

    Obviously something changed, but I’m just not sure. The only recent update was the WP to 4.3.1 from 4.3. and the Avada template

    There are a few plugins such as BuddyPress (2.3.3) and jonradio Private site (2.14)

    Below is the chronicle of the process that is broken.
    I’m hoping something pops out here to someone.

    Thank you for any direction!!!!

    Step 1:
    Add new user through admin WP interface:
    enter information
    password is hidden, so I click show password – system generates secure password (wish I could override this, but it doesn’t stick when i do)
    leave as-is and “Create”

    Step 2:
    Email arrives to admin and new user
    User:
    “To reset your password, visit the following address:”
    Link 1: https://domain.com/wp-login.php?action=rp&key=(different than pw in creation screen)$login=username
    Link2:standard domain login page

    Step 3:
    Click link 1…
    Opens domain/wp-login.php?action=rp
    “Enter your new password below.”
    New password is prepopulated with another strong password.
    I’m going to change password here.- instructional text on screen recommends at least 12 characters, but it seems to accept less – or at least doesn’t stop me from resetting with a shorter pass.
    I’ve also tried just leaving as-is
    Press Button “Reset Password”
    “Password Lost/changed” Email sent to admin

    Step 4:
    Shown screen:
    “Your password has been reset. Log in”
    The URl in the “Log in” is : https://domain.com/wp-login.php?redirect_to=https://domain.com/wp-login.php?action=resetpass
    ** is it looping here?

    User would obviously click this link

    Step 5:
    Goes to wp-login screen
    screen shows username, password, button = “Log in”
    Login using the new password that I created in step or the one generated

    Step 6:
    Arrive at Reset password screen (domain.com/wp-login.php?action=lostpassword&error=invalidkey)
    “Please enter your username or email address. You will receive a link to create a new password via email.
    Your password reset link appears to be invalid. Please request a new link below.”
    Box to enter username or Email
    button =”Get new password”

    looping….
    ARGHHHHHH

Viewing 7 replies - 1 through 7 (of 7 total)
  • liesllukacs

    (@liesllukacs)

    No response yet? I’m seeing the loop as well on multiple sites.

    Thread Starter tkcers

    (@tkcers)

    Nothing yet. I hid the reset password link and have been dealing with requests from users as they happen.

    Bummer that there is no one with any ideas to help.

    markhx

    (@markhx)

    Just noticed the same problem myself. My first hacky fix would be just to patch the bad link out of wp-login.php, but that’s horrible.

    I also use jonradio – perhaps it’s something in that? I’ll have a dig.

    lisa

    (@contentiskey)

    If you have any plugins that are impacting the setup, signin or password process, disable them to see start to isolate the issue.

    (I have recently had a similar issue with invalid password key on buddypress website using a login plugin and needed to change out one of the plugins that was creating problem)

    markhx

    (@markhx)

    I did some digging. I think it’s the jonradio (my private site) plugin and the ‘landing location’ setting. Changing it to ‘Site Home’, for example, rather than the default seems to sort it for me. It might be the problem OP is having too.

    I’ll contact the jonradio guy and see if he has any ideas ??

    Thread Starter tkcers

    (@tkcers)

    Thanks markhx (and all).
    It seemed to solve the problem.
    I tested with both a new user and as an existing user – changing the password via “lost” password link.
    And didn’t get stuck.

    I ended up changing all usernames to equal email addresses- as sometimes I was trying to use the email when it wanted a username and vice versa- adding user error to the mix.
    ??

    I’m experiencing the same problem.

    I tested from the email link and does not work.
    But when I copy and paste the link into the web browser it works.

    My Theme has Admin Branding, so no luck shutting that off.

    I’ll update the AIT-Themes Directory+ to newest version and see if that fixes the problem.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘New user registration / login loop – invalid key – step by step details’ is closed to new replies.