Hi– thanks for using Force Login!
Since your site is using a custom lost password URL, you will need to use Force Login’s bypass filter to allow public access to those custom URLs.
Good luck!
Hi, I think I have the same problem. I added an exception for the password recovery url, but when the user receives the email to create a new password, the script does not recognize the new url consisting of “whitelistedurl/?Key=xxxxxxxxx”
is there a way to get everything after the url to be whitelisted?
Yes, I have exactly the same issue. I was able to whitelist the login and registration pages, but as soon as the user wants to hit the password reset link with the ?key=XXX&id=XXX then it does not work at all… he always gets redirected to the login page…
So I’m using Woocommerce, this might be different for other setups.
I added
home_url( '/mein-konto/lost-password' ),
home_url( '/mein-konto/lost-password?show-reset-form=true&action' ),
home_url( '/mein-konto/customer-logout' ),
to the bypass list and also added this code within the same function:
global $wp;
$current_url = home_url( add_query_arg( array(), $wp->request ) );
if($current_url == home_url( '/mein-konto/lost-password') && $_GET){
$allowed[] = $current_url;
}
Not quite sure if the second one works but I can now reset my passwords…
-
This reply was modified 3 years, 10 months ago by
Thomas.
@undersound
Check out this support thread for an example of how to do this for WooCommerce:
https://ww.wp.xz.cn/support/topic/password-reset-with-woocommerce/#post-10337263
Good luck!