I have a temporary solution after also reading this topic:
https://ww.wp.xz.cn/support/topic/profile-page-change-password-conflict
As well as the modification to line 1103 in the file:…/theme-my-login/includes/class-theme-my-login.php
I also did:
add to css:
#pass1, #pass2 { display: none; }
And in the file: …/theme-my-login/templates/reset-form.php I commented out line 17:
<label for=”pass2<?php $template->the_instance(); ?>”><?php _e( ‘Confirm new password’, ‘theme-my-login’ ); ?></label>
Now password reset works. Not well, but it does work. I hope Jeff can fix / upgrade this very soon……….
got the same issue, hope it can be fixed soon
lom
(@deindeal)
Summery:
– Password Reset is NOT working, because of different hash functions (wrong key in DB)
– Password Change is NOT working in profile (Cannot read property ‘className’ of undefined in user-profile.min.js?ver=4.3:1 and strange behaviour in the second password imput)
Jeff help us please! 🙂
lom
(@deindeal)
Hi there,
I’ve solved the problem, but it is a hack in the TML files. The problem is, that the key should be saved to the database with a timestamp (now) in front of it.
But it is working:
Chenge the following line 1104 in this file: ../theme-my-login/includes/class-theme-my-login.php
from:
$wpdb->update( $wpdb->users, array( ‘user_activation_key’ => $hashed ), array( ‘user_login’ => $user_login ) );
to:
$wpdb->update( $wpdb->users, array( ‘user_activation_key’ => time().”:”.$hashed ), array( ‘user_login’ => $user_login ) );
The second problem with the strange behaviour in the second input password field:
remove the password strength check in the resetpass-form.php and remove the id:
from:
<input autocomplete=”off” name=”pass2″ id=”pass2<?php $template->the_instance(); ?>” class=”input” size=”20″ value=”” type=”password” autocomplete=”off” />
to:
<input autocomplete=”off” name=”pass2″ class=”input” size=”20″ value=”” type=”password” autocomplete=”off” />
Hope this “fix” will help you until the next update is coming.
best regards from Munich.
m
Thanks Link-o-mat – it works nicely! Hopefully we’ll hear from the developer soon…
As you’ve noticed, the plugin hasn’t been updated for WP 4.3. I’ve recently took a “position” with a firm whose giving me 40 hours a week so my free time is extremely limited. But your concerns are heard and 7.0 has been in the works for quite some time.
Thanks link-o-mat, it worked… Saved the day…. CHEERS!!
@link-o-mat.com, your solution worked for me – thanks!
I did have to add the following css due to a random field popping up that showed your password in plain text as you typed it:
input#pass1-text {
display: none;
}
Anonymous User 8137416
(@anonymized-8137416)
This isn’t working for me. Anyone else with the problem find some other solution, maybe some other plugin that does work? I really like this one, exactly the functionality I need, now it’s ruined.
@nacame – So basically my issue was due to the fact that TML now uses cookies to validate the reset password link instead of just the URL. My server was configured in such a way that if a user is logged out, cookies get caught in the cache unless there is an exception. I asked my web host to make exceptions on the appropriate pages (the reset password page and the forgot my password pages).
After I did that, using link-o-mat’s fix worked fine to resolve the expired key issue, but now I am left with the issue of the disappearing characters in the confirm password box. Has anyone found a solution for this?
#pass1-text { display: none; }
this is the correct fix for the additional field, you shouldn’t be hiding the #pass1 field.
Nope, I was wrong, sorry for the misinformation (it was late). 🙂
I not finding:
Chenge the following line 1104 in this file: ../theme-my-login/includes/class-theme-my-login.php
from:
$wpdb->update( $wpdb->users, array( ‘user_activation_key’ => $hashed ), array( ‘user_login’ => $user_login ) );
This new update to WordPress bites… users are getting Invalid Key when trying to reset passwords
When trying to reset and upon clicking on link provided I get:
Sorry, that key has expired. Please try again.
