Reset Password Validation Logic
-
Default WordPress reset password validation requires either username OR email address as documented here: https://ww.wp.xz.cn/support/article/resetting-your-password/#through-the-automatic-emailer.
I believe the plugin should follow the default WordPress behavior. However, it requires both username and email address to submit a reset password request.
See error condition at /inc/core.php (373):
if ( ! $arr[‘user’] || ! $arr[’email’] ) {
Please change to:
if ( ! $arr[‘user’] && ! $arr[’email’] ) {
The topic ‘Reset Password Validation Logic’ is closed to new replies.