Invalid Key

[jpmull]

Hi, I have a blog with approximately 50 users that I’ve imported. I’m instructing users to use the “Forgot Password” link to set their initial password.

Users are able to complete the form and receive a link to set their passwords. When they do, the are redirected to a page that simply states “Invalid Key”

It does seem that the password reset is working, but the page with the “Invalid Key” message is confusing to my users and is causing a lot of support calls to me….

Any ideas?

Thanks,

John

[Khaled]

When any user request for password reset through User Meta, we generate a unique hash key to validate original password reset link. Once link is validated then that generated key will remove. So after validation, if anyone try with password reset url it will show “Invalid Key”.

In your case, it may be a plugin conflict. Any other plugin may be reloaded the page after validation is completed. Please try with temporarily disable other plugin. If it not help, then please contact with our “Contact Us”

Thanks.

[babelscribe]

Hi
We are having this problem as well with a new site we just launched using User Meta Pro 1.1.2 and wordpress 3.41.

A couple of observations that might help.
1) Its not all users that have this problem
2) Its not related to an incomplete link or the link being broken over two lines
3) The username might have spaces in it
4) URL encoding of the username results in %20 in place of spaces
5) The link recieved has the % stripped out

A url that failed recently looked like this:

http://www.mydomain.com/member-login/?action=rp&key=fAtRH9MVms9TOEb0sC9x&login=Saint20Estate20Ltd

Did this fail because the username looks like Saint20Estate20Ltd?

I hope that helps and that it can be resolved soon as it is quite a problem for us as we need all members 450+ to reset their passwords.

Many thanks

Mouli

[Support]

Hello,

Please upgrade to latest release. We have some fixes with new release then 1.1.2. Make sure you have completely remove existing version while update to new release. And after update, clean your browser cache so that your browser can render new/modified js/css files.

Thanks.

[babelscribe]

Many thanks for your reply.
I am already running 1.1.2.
Are you suggesting that I upgrade to one of your 1.1.3 release candidates?
If so which one would you recommend?
I notice that 1.1.3rc2 has an upgrade notice on it.
Does this mean that this might be the best one for me to try?

Mouli

[Support]

Have a try with latest release 1.1.3rc3
Here is the changelog: http://user-meta.com/changelog/
Thanks.

[johnc-]

I think I know what is happening here, but still need a fix. (am running 1.1.3 pro):

– User clicks “Lost your Password?” enters their username/email
– User gets forgotten password link in email
– They click it, and create a new password, and submit
– They then click login, then are redirected to the referring URI, which was the reset password page with the now expired hash key.

I need the redirect by referral to stay but not for this page. Whats the work around?

John

[Support]

Hello John,
Thank you for your observation. Here is some codes that allow you to change login redirect url based on specific condition. Please make your changes and put those code to functions.php


add_filter( 'login_redirect', 'ump_login_redirect_function1' );
function ump_login_redirect_function1( $redirect_to ){echo $redirect_to;
if( $redirect_to == 'http://example.com/resetpass/' ) // If redirect page is resetpass page
$redirect_to = get_home_url (); // Redirected to home url, you can use something else
return $redirect_to;
}

add_filter( 'user_meta_filter_list', 'user_meta_filter_list_function' );
function user_meta_filter_list_function( $list ){
$list[ 'login_redirect' ] = true;
return $list;
}


[chirotouch]

I just want the default WP forgot user link (http://staff.chirotouch.com/wp-login.php?action=lostpassword) because I’m using s2member plugin and it’s locking me out of your “resetpass” page being my all pages are access restricted. Can’t I just disable this feature in your plugin? Really don’t want to do the above function to restore WP default.

[Support]

Hello,
To disable lost password feature, Go to User Meta >> Settings >> Login Tab
Then check “Disable lost password feature” checkbox and save your changes.
Thanks.

[Author]

Posts