[wp-trac] [WordPress Trac] #39720: retrieve_password_key returning strings including special characters that in a link is url encoded

[WordPress Trac]

#39720: retrieve_password_key returning strings including special characters that
in a link is url encoded
-------------------------------------+------------------------------
 Reporter:  dejliglama               |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Users                    |     Version:  4.7.1
 Severity:  normal                   |  Resolution:
 Keywords:  reporter-feedback close  |     Focuses:
-------------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:   => reporter-feedback close


Comment:

 Thanks for the report, @dejliglama.

 The password reset key intentionally does not include special characters
 such as punctuation. See:
 https://core.trac.wordpress.org/browser/trunk/src/wp-
 includes/user.php?rev=39600&marks=2110#L2108 (note that `false` is passed
 as the second parameter to `wp_generate_password()`).

 Are you using a plugin on your site which overrides the password reset
 process?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39720#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform