[wp-meta] [Making WordPress.org] #3661: Email confirmation link broken
Making WordPress.org
noreply at wordpress.org
Wed Jun 20 04:32:26 UTC 2018
#3661: Email confirmation link broken
------------------------------------+---------------------
Reporter: yarden | Owner: (none)
Type: defect | Status: closed
Priority: high | Milestone:
Component: Login & Authentication | Resolution: fixed
Keywords: |
------------------------------------+---------------------
Changes (by dd32):
* resolution: invalid => fixed
Comment:
Replying to [ticket:3661 yarden]:
> I tried to change my email address using the form at
https://make.wordpress.org/wp-admin/user/profile.php
>
> The confirmation email tells me to click on this link:
https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx
This sounds like a Core bug rather than a WordPress.org-specific thing.
That being said, access to `make.wordpress.org/wp-admin/user/` shouldn't
have been possible for most users, but was due to a weird carve-out for
the WordPress.org Handbooks plugin. There was no security issues there,
just confusion as updating the profile in the WordPress user admin
wouldn't work correctly.
This has now been fixed and the first link in your post is no longer
accessible unless you've got a special account.
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/3661#comment:2>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list