Lost Password – All Password Reset Links Invalid

  • Resolved jat247

    (@jat247)


    6 years, 7 months ago

    I’m on the latest version of Theme My Login, as well as WordPress 4.9.5

    When a user clicks the “Lost Password” link and enters either their username or email and clicks “Get New Password” they receive an email with a link to reset their password.

    As far as I can tell this was working fine until the recent update of WordPress version 4.9.5 – now any user that clicks the link to reset their password is directed to a page with a hyperlink of “<domain name>/lostpassword/?error=invalidkey” and a red box shows up saying “Your password reset link appears to be invalid. Please request a new link below.”.

    So if any user has forgotten their password, they are locked out of our site currently with no way back in. Please advise.

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author Jeff Farthing

    (@jfarthing84)

    Invalid key error usually comes from caching. Has your host perhaps recently implemented server-side caching?

    Thread Starter jat247

    (@jat247)

    I use Dreamhost (DreamPress) which utilizes memcache and Varnish, but we have had these services for about a year with no issue. Should I ask our hosting provider to manually flush the cache server-side and see if that resolves it?

    • This reply was modified 6 years, 7 months ago by jat247.
    Plugin Author Jeff Farthing

    (@jfarthing84)

    You should ask them to exclude all of TML’s pages from the cache.

    Thread Starter jat247

    (@jat247)

    That resolved it. I had the following URLs whitelisted:

    /login/
    /lostpassword/
    /resetpass/

    Thanks Jeff!

    Whitelisting the URLs from the cache worked for me as well (on WP Engine Hosting).

    /login/
    /lostpassword/
    /resetpass/

    Thank you Jeff!

    I am on the latest version of your plugin (7.011). I also have all three password related pages from the caching excluded, however, I am still getting the message:

    Your password reset link appears to be invalid. Please request a new link below.

    Thomas Herold

    • This reply was modified 6 years, 1 month ago by herold.

    @herold
    May be the problem is in your link.Closing ‘>’ is might becoming part of link parameter.

    Go to plugin theme-my-login/includes/compat.php,
    search for following line:
    $message .= ‘<‘ . network_site_url( “wp-login.php?action=rp&key=$key&login=” . rawurlencode( $user->user_login ), ‘login’ ) . “>\r\n”;

    Modify it as:
    $message .= network_site_url( “wp-login.php?action=rp&key=$key&login=” . rawurlencode( $user->user_login ), ‘login’ );
    Then retest your lost password functionality.

    Please help me.. I am also getting this errror but unable to solve this

    • This reply was modified 5 years, 11 months ago by sanketpavar.

    If not CACHE related, could be that anyone using Microsoft Outlook clients are not able to click the link. They have to copy and paste it, invariably WITH the stray HTML closure tag at the end.

    wp-content/plugins/theme-my-login/includes/compat.php

    Removing the stray ‘<‘ and ‘>’ from the above file on line 91 worked for us.

    $message .= '' . network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user->user_login ), 'login' ) . "\r\n";

    Moderator James Huff

    (@macmanx)

    Hi there @entropea I see you reported this thread to the moderators. Please note that we are just the folks who enforce the rules around all of www.remarpro.com.

    Reporting to moderators doesn’t get any faster support, instead it just kind of attracts attention from folks whose radar you probably don’t want to be on. ??

    If you really do need a moderator, please add a reply letting us know why before you hit the report button.

    Otherwise, please hang in their for Theme My Login’s support to reply when they can.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Lost Password – All Password Reset Links Invalid’ is closed to new replies.