Still have the password reset invalid problem

Again, with the your custom email module deactivated it works fine. When activated it doesn’t.

Yes in your case, not in mine.

If you’re using WPEngine, you have not disabled caching. Tell them you need caching disabled for all of TML’s pages. Then, verify that it has been done by accessing the pages and inspecting the headers for cache miss headers.

I am not using WPEngine. I have inspected the headers to be sure that the host is not server caching.

Still have the issue with the email module activated as stated above.

Why is the topic that I started marked resolved when it is not.
@chaugi if you are having a different issue please start a new topic that is specific to your issue so this thread does not get off track.

Thanks,
Troy

I believe everyone else that has participated in this discussion has a completely different issue than the OP.

Well I am concerned with the issue that I’m having which is the reason I started the post. Do you have any insite/fix for this?

Having the same issue! Is there no fix for this?
WordPress 4.5.3, TML 6.4.5. Hosted with WPEngine.
Error Message:
“Your password reset link appears to be invalid. Please request a new link below.”

I thought this should be an easy fix?

Yes. Tell WPEngine to exclude TML’s pages from caching.

Hello, sorry to bother you but i’m having another trouble with the revcover passwords.
I enter the login screen, i put recover password and my page gets white and nothing happens.
I have the wordfence plugin that sends me an email when i try to recover password, but nothing else happens, i try a lot of thigns, but i cannot make it work and i really need this functionality!

Sorry for my bad english, do you thinks that can help me? I don’t have any cache plugin, i used to have w3 cache, i have wordfence plugin but i try with this, and without and nothing happens.

I hope you can guide me in the right way to solve it.
Thank you.

@jeff Farthing. WPEngine: Yes and they did. It didn’t work.

I think (95% sure) its my theme. I switched to TwentyFifteen and it all works fine.
My theme (https://themeforest.net/item/newspaper/5489609) has some custom login hooks that I think are interfering. Raised the issue with the author, but still looking for a simple (even if temporary) fix.

@Everyone-else, try switching themes to know if your theme is the culprit.

Thanks

Hi Jeff:

I have been having this issue too, and would be so happy to get to a resolution. I use TML on a website with PaidMembershipsPro, and have been extremely happy with all the funtionality of the plugin. But I can’t resolve this issue, which happens in two flavors:

1) When the link that is sent with the “lost password” email is sent, sometimes I successfully get to the reset page, reset the password, and then when I try to use the new password, I get an error message that the password is incorrect.

2) More often, clicking on the link in the “lost password” email yields the following error:

“Your password reset link appears to be invalid. Please request a new link below.”

These two issues happened just this morning, where I first was able to reset the password but then it wasn’t recognized, and then the next lost password email link generated the “link appears to be invalid” error.

I have tried all the fixes I’ve discovered in various threads: We do not have server-side caching; I have tried disabling “Enable custom email”; I have tried copying and pasting the URL in the password reset email into the browser. None of these has worked so far.

Our membership website is really disabled at the moment if users can’t reset their passwords. I would be so grateful for additional suggestions of what could fix the issue. Thank you!!

Maggie
The Neuropsychoanalysis Association
https://www.npsa-association.org

Hi all – Success! I found the solution.

I use PaidMembershipsPro (PMPro) on our site, and it’s critical for TML to work, since the whole point is to allow logging in, and resetting passwords when necessary.

I went crazy trying to figure out this problem, following Jeff’s observation that it has to do with server-side caching. Our server was not caching, so I was at a loss, until I realized that our Sucuri firewall was caching the site.

So the issue got fixed by excluding the entire Theme My Login directory from caching. I am not an expert in this, but my layperson’s interpretation is that, if the login or reset password page is being cached, it is not the “real” or fresh page that needs to be used in order to reset a password, or login with a password that has been reset. Then an error is generated when someone tries to reset a password on a page that is considered invalid because it is old.

(For any Sucuri users — you can exclude a directory by going to the “NON-CACHE URLS” section of the Performance Settings (under the “Performance” tab on your dashboard. Just a note – after I did this, I encountered a difficulty where the site did not load (timed out) after resetting a password. It did this to several other users as well. Then a Sucuri tech told me it had to do with too many pending queries or something, cleared something out, and then it hasn’t happened since. This might have had something to do with propagating the changes made in excluding the TML directory from caching, not sure.)

• This reply was modified 7 years, 9 months ago by MaggieZ.
• This reply was modified 7 years, 9 months ago by MaggieZ.
• This reply was modified 7 years, 9 months ago by MaggieZ.

EDIT

My mistake… didn’t read the 2nd page of replies where it mentions informing WP Engine to disable the cache on TML pages. That worked for me.

My bad

Thanks!

• This reply was modified 7 years, 8 months ago by jonsunlu. Reason: Didn't read the full thread

Same here, using Paid Members Pro and Theme My Login. They recommend using your plugin and not sure about any alternatives to try that are current and well supported, to resolve the link invalid issues. Resetting passwords for members manually that get this error has been tedious, not sure if other members are trying to reset and just giving up instead of contacting us.

Thanks