I am trying create passowrd reset form. Here is my function:
<?php
$user_data = get_user_by( 'email', 'admin@mysite.com' ) );
$key = get_password_reset_key( $user_data );
$user_login = $user_data->user_login;
$message = esc_url( get_permalink( '1' ) . "?action=rp&key=$key&login=" . rawurlencode($user_login) ) . "\r\n";
wp_mail( $user_email, "Title", $message );
?>
It sends reset link to my mail, with $key and $login. It is ok.
Now i must check the reset key. Here is my code:
<?php
$errors = new WP_Error();
$user = check_password_reset_key($_GET['key'], $_GET['login']);
if ( is_wp_error( $user ) ) {
if ( $user->get_error_code() === 'expired_key' )
echo "Key is expired";
else
echo "Key is not valid";
}
?>
But it always says Key is not valid. Where is wrong?
else
, try toecho
the$user->get_error_message()
instead of "Key is not valid", and see what it says. – Sally CJ Feb 26 '18 at 7:09$user = check_password_reset_key($_GET['key'], rawurldecode($_GET['login']));
because yourawurlencode()
thelogin
in the email. If that doesn't work, dovar_dump( $_GET['key'], $_GET['login'] );
and see if the values are valid. – Sally CJ Feb 26 '18 at 17:39esc_url()
works. I.e. By default, it converts&
to&
. Sorry that I didn't really notice (or pay attention to) thewp_mail()
part. =) – Sally CJ Feb 26 '18 at 19:32