[wp-trac] [WordPress Trac] #45479: Display text after lost password request
WordPress Trac
noreply at wordpress.org
Tue Dec 4 09:05:20 UTC 2018
#45479: Display text after lost password request
------------------------------------+-----------------------------
Reporter: yuluma | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Login and Registration | Version:
Severity: normal | Keywords: 2nd-opinion
Focuses: |
------------------------------------+-----------------------------
First i've posted this here https://wordpress.org/support/topic/display-
text-after-lost-password-request/ and James Huff sugested to create a bug
report.
-------------------
Current situation with clean install and twenty 17 theme.
**Reset password with an email address that exists in the user section**
get a text message after reload that a password reset link was send to the
given address
**Reset password with an email address that doesn’t exist in the user
section**
get a redirect to the password reset page… nothing else
According to general standards like this, or this I would expect the same
response like:
If you have an account with us we’ve send you an email with a link to
reset your password.
OR
If WP cares less about security/privacy at least I would expect a text to
display with a failed password request. Especially now we know there IS a
difference between an existing and non existing email address.
UX Bug
At least we could state that we now have a situation where we do inform
the customer and where we leave them in great doubt if anything happened
at all. This can’t be good for the users of the sites that work with WP.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/45479>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list