[wp-trac] [WordPress Trac] #19767: Password Reset email returns invalid account address

WordPress Trac wp-trac at lists.automattic.com
Sat Jan 7 05:55:43 UTC 2012


#19767: Password Reset email returns invalid account address
--------------------------+-----------------------------
 Reporter:  raamdev       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
--------------------------+-----------------------------
 The retrieve_password() function in wp-login.php calls network_site_url()
 (see source:/trunk/wp-login.php#L211), which on a non-multisite network
 calls site_url(), which then returns the '!WordPress Address'.

 However, that doesn't make sense when the '!WordPress Address' and 'Site
 Address' are different.

 People receiving Password Reset emails shouldn't be seeing the '!WordPress
 Address', they should be seing 'Site Address'. When these fields are
 different, the '!WordPress Address' URL doesn't even point anywhere useful
 to the user.

 FYI, I do have {{{FORCE_SSL_ADMIN}}} enabled. My '!WordPress Address' is
 set to https://raamdev.com/wordpress while my 'Site Address' is set to
 http://raamdev.com. Password reset emails contain the former address.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19767>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list