After the mail system was built, a very strange thing happened: The mail arrived at my mailbox, I clicked the link, but I could not set the password, prompting me "your password reset link is invalid, please request a new link below."

After a while, Google discovered that such a problem was not met by me alone.

This is not a problem with WordPress itself. After receiving the email, the mailbox mistakenly thinks that the password is “<>” before and after the password is reset. The hyperlink is generated as a link address. After clicking the link, the parameters passed to WordPress are incorrect. ), so wordpress prompts the password reset link to be invalid. Error link example:

This problem mainly affects the password recovery function when the password is forgotten, and the new user registration, the password setting function sent by the system to the new user. There are two steps you can take to resolve this issue:

# solution

*Resolve the password "Your password reset link is invalid" when retrieving the password: *

Open wp-login.php in the WP root directory and find the following code (about 374 lines):

$message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";

change into:

$message .=network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode ($user_login), 'login') . "\r\n";

# solution

When resolving new user registration, click on the reset password link in the email to say "Your password reset link is invalid":

Open /wp-includes/pluggable.php in the WP installation directory and find the following code (about 1741 lines):

$message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode ($user->user_login), 'login') . ">\r\n\r\n";

change into:

$message .= network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode ($user->user_login), 'login') . "\r\n\r\n";

After the above modification, the password reset received by the user and the password setting email received by the new user will no longer contain "<>", and the user can reset or set the password after clicking the link in the mailbox.

Ps: The above modification involves the modification of the Wordpress source code. After each upgrade of Wordpress, the modification will be overwritten and the above modifications must be made.

# Reference material

WordPress重置密码时提示“您的密码重设链接无效”