[wp-trac] [WordPress Trac] #28316: Resetting Password via wp_set_password in functions.php creates reset loop

[WordPress Trac]

#28316: Resetting Password via wp_set_password in functions.php creates reset loop
------------------------------------+-----------------------------
 Reporter:  Ipstenu                 |      Owner:
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  3.8
 Severity:  normal                  |   Keywords:
  Focuses:  administration          |
------------------------------------+-----------------------------
 This is an extreme edge case, but here's the story.

 One of the directions on resetting your passwords involves using
 wp_set_password():
 https://codex.wordpress.org/Resetting_Your_Password#Through_FTP

 The wp_set_password part works great, user added it to functions.php,
 password was reset. The PROBLEM is that they couldn't log in.

 > 4. After you then are able to login, make sure to go back and remove
 that code.
 > It will reset your password on every page load until you do.

 The password was resetting on every page load, which meant they'd log in,
 the password would reset, and they'd be logged out and sent back to the
 login page with no error message. You just got a loop. The fix was to set
 the password in functions, refresh a page, DELETE that line, and go back
 in.

 I believe this is related to changes made in how we allow for in-line
 logins on wp-admin, as when I tested by being logged in and changing the
 password via wp_set_password and also in the DB. When I did that, I was
 prompted by WP to log in again.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28316>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform