Como Posted August 3, 2023 Share Posted August 3, 2023 I heard from members that the password reset link in their email redirects them to the home page with no opportunity to update their password. I've tested and can confirm this behaviour. There are no entries in the error logs. Thanks. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 3, 2023 Share Posted August 3, 2023 Do you have an example of the email link you could send me? Also, have you disabled all 3rd party while testing this? Link to comment Share on other sites More sharing options...
Como Posted August 3, 2023 Author Share Posted August 3, 2023 (edited) Hi Marc, https://xxxxx.xxx/index.php?app=core&module=system&controller=redirect&url=https://xxxxx.xxx/lostpassword/?do=validate%26vid=2e0194899488addb3617fb6595bfc1ca%26mid=223015&key=330e6282572ad380add0469d989e5a91590fb0ab8b793be0fe6d423c2f23c822&email=1&type=lost_password_init No, I have not disabled all addons. One, in particular, I cannot disable without taking the site offline (it involves member privacy). Let me know on the above link, and if it looks good, and I'll perform some testing. PS The above link is more than an hour old, so even with the site address, it is no good to anyone. Edited August 3, 2023 by Como Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 3, 2023 Share Posted August 3, 2023 Are you using sendgrid at all? I suspect something is being rewritten there, and one of our developers has mentioned the same. If you can send me the full unredacted URL via pm that may be helpful Link to comment Share on other sites More sharing options...
Como Posted August 3, 2023 Author Share Posted August 3, 2023 No, we do not use Sendgrid. I'll send you PM within a minute. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 3, 2023 Share Posted August 3, 2023 Something appears to be messing with the encoding on some characters there. Either through an issue with your email service, changes in email templates, or 3rd party interference. There are parameters which wouldnt be passed over for that reason. Link to comment Share on other sites More sharing options...
Como Posted August 3, 2023 Author Share Posted August 3, 2023 Members have have experienced the same problem. I've an idea of what the problem might be. I'll send you a PM in a few minutes. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 3, 2023 Share Posted August 3, 2023 If the URL is formatted the same, then they will indeed have the same issue Link to comment Share on other sites More sharing options...
Como Posted August 3, 2023 Author Share Posted August 3, 2023 Hi Marc, I sent you another sample link (PM), from another email account. Same URL structure. All apps and plugins are disabled (I double-checked). Link to comment Share on other sites More sharing options...
Jim M Posted August 3, 2023 Share Posted August 3, 2023 Please be advised I have escalated this to a ticket so that we can further investigate. Link to comment Share on other sites More sharing options...
Como Posted August 3, 2023 Author Share Posted August 3, 2023 Thanks. Link to comment Share on other sites More sharing options...
Como Posted August 6, 2023 Author Share Posted August 6, 2023 I suspect the following is related to the above. The URL to user profiles, as displayed next to posts, is appended with an apparently superfluous string of characters. I disabled all apps and plugins and retested - same result. I note that no similar extra characters appear here when I hover/click usernames beside posts. https://xxxxx.xxx/profile/USER-ID-USERNAME/?wr=eyJhcHAiOiJmb3J1bXMiLCJtb2R1bGUiOiJmb3J1bXMtY29tbWVudCIsImlkXzEiOjI3MDg3NywiaWRfMiI6MzQ0NDU3NX0= The appended string is different for every post. Thanks. Link to comment Share on other sites More sharing options...
Como Posted August 6, 2023 Author Share Posted August 6, 2023 Seems there is an explanation for my above post here: I am not sure I fully understand, but it appears to be benign and expected behavior. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 7, 2023 Share Posted August 7, 2023 Please add any further information to your ticket rather than to the topic here Link to comment Share on other sites More sharing options...
Como Posted August 7, 2023 Author Share Posted August 7, 2023 I do not have a ticket. Or, if I do, I have not received an email with a link to it. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 7, 2023 Share Posted August 7, 2023 You got the right thing there. I have just responded to you Link to comment Share on other sites More sharing options...
Como Posted August 7, 2023 Author Share Posted August 7, 2023 Cheers, Marc. Yeah, I did not realise that regular email from the regular support address was a ticket. Thanks. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 7, 2023 Share Posted August 7, 2023 1 hour ago, Como said: Cheers, Marc. Yeah, I did not realise that regular email from the regular support address was a ticket. Thanks. No problem at all 🙂 Link to comment Share on other sites More sharing options...
Como Posted March 31 Author Share Posted March 31 Hi. This bug is back! Similar, very long reset link, which does not resemble correct rest links. The work around is the same as before: Admin Control Panel > System > Email > (disable) Log Statistics setting I few weeks ago, a member contacted me about her problems resetting her password. I assumed she was doing something wrong and I reset it manually for her. But the problem arose again today, and I tested it for myself. I am not very happy that this bug has been reintroduced. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted April 2 Share Posted April 2 Thank you for bringing this issue to our attention! I can confirm this should be further reviewed and I have logged an internal bug report for our development team to investigate and address as necessary, in a future maintenance release. Link to comment Share on other sites More sharing options...
Recommended Posts