[wp-trac] [WordPress Trac] #29156: $rp_path does not respect SITECOOKIEPATH/COOKIEPATH

WordPress Trac noreply at wordpress.org
Mon Aug 25 15:58:52 UTC 2014


#29156: $rp_path does not respect SITECOOKIEPATH/COOKIEPATH
------------------------------------+-----------------------------
 Reporter:  WALoeIII                |       Owner:
     Type:  defect (bug)            |      Status:  new
 Priority:  normal                  |   Milestone:  4.0
Component:  Login and Registration  |     Version:  trunk
 Severity:  normal                  |  Resolution:
 Keywords:  reporter-feedback       |     Focuses:  administration
------------------------------------+-----------------------------

Comment (by gregsullivan):

 For me, it's as follows:

 1. Request lost password link at http://domain.com/wp-
 login.php?action=lostpassword
 2. Receive email; contains link to http://domain.com/wp-
 login.php?action=rp&key=<key>&login=<username>
 3. Click link; 301 redirect to http://domain.com/wp-login.php?action=rp

 At this point the cookie is set, but the form on that page has as its
 action:

 http://domain.com/subdirectory/wp-login.php?action=resetpass

 Submitting the form results in, "Sorry, that key does not appear to be
 valid."

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29156#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list