[wp-meta] [Making WordPress.org] #3661: Email confirmation link broken

Making WordPress.org noreply at wordpress.org
Wed Jun 20 04:32:26 UTC 2018


#3661: Email confirmation link broken
------------------------------------+---------------------
 Reporter:  yarden                  |       Owner:  (none)
     Type:  defect                  |      Status:  closed
 Priority:  high                    |   Milestone:
Component:  Login & Authentication  |  Resolution:  fixed
 Keywords:                          |
------------------------------------+---------------------
Changes (by dd32):

 * resolution:  invalid => fixed


Comment:

 Replying to [ticket:3661 yarden]:
 > I tried to change my email address using the form at
 https://make.wordpress.org/wp-admin/user/profile.php
 >
 > The confirmation email tells me to click on this link:
 https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx

 This sounds like a Core bug rather than a WordPress.org-specific thing.

 That being said, access to `make.wordpress.org/wp-admin/user/` shouldn't
 have been possible for most users, but was due to a weird carve-out for
 the WordPress.org Handbooks plugin. There was no security issues there,
 just confusion as updating the profile in the WordPress user admin
 wouldn't work correctly.

 This has now been fixed and the first link in your post is no longer
 accessible unless you've got a special account.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/3661#comment:2>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list