Login Widget on Multisite

Hello,

When using the pro login widget on WordPress Multisite the forgot password link navigates to the primary domain not the current domain.

eg:

http://www.site2.com forgot password links to

http://www.site1.com/wp-login.php?action=lostpassword
not
http://www.site2.com/wp-login.php?action=lostpassword

Not sure if this is a bug or a problem specifically to me?

Thanks

Hi Philly.

Not sure if it’s specific to you or general. s2Member is just using the wp_lostpassword_url WP function, so if it’s general then it’d be a bug in WP itself. http://codex.wordpress.org/Function_Reference/wp_lostpassword_url

s2member-pro\includes\classes\login-widget.inc.php
[hilite pre_code]
echo '' . _x ("forgot password?", "s2member-front", "s2member") . '' . "\n";
[/hilite]

If you do [hilite code][/hilite] in one of your posts, do you get the correct URL?

Maybe another plugin is causing this in your installation? You could test deactivating other plugins one by one, checking that URL after each to see if changes.

I hope it helps. :)

Yes Thank you Cristián.

Its a WordPress bug introduced 10 months ago in wp-includes/general-template.php

function wp_lostpassword_url( $redirect = '' ) {
	        $args = array( 'action' => 'lostpassword' );
	        if ( !empty($redirect) ) {
	                $args['redirect_to'] = $redirect;
	        }
	
	        $lostpassword_url = add_query_arg( $args, network_site_url('wp-login.php', 'login') );
	        return apply_filters( 'lostpassword_url', $lostpassword_url, $redirect );
}

Should be

function wp_lostpassword_url( $redirect = '' ) {
	        $args = array( 'action' => 'lostpassword' );
	        if ( !empty($redirect) ) {
	                $args['redirect_to'] = $redirect;
	        }
	
	        $lostpassword_url = add_query_arg( $args, site_url('wp-login.php', 'login') );
	        return apply_filters( 'lostpassword_url', $lostpassword_url, $redirect );
}

Also WordPress is generating the incorrect email in wp-login.php

$message = __('Someone requested that the password be reset for the following account:') . "\r\n\r\n";
	$message .= network_home_url( '/' ) . "\r\n\r\n";
	$message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
	$message .= __('If this was a mistake, just ignore this email and nothing will happen.') . "\r\n\r\n";
	$message .= __('To reset your password, visit the following address:') . "\r\n\r\n";
	$message .= '<' . network_site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";

should be

$message = __('Someone requested that the password be reset for the following account:') . "\r\n\r\n";
	$message .= home_url( '/' ) . "\r\n\r\n";
	$message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
	$message .= __('If this was a mistake, just ignore this email and nothing will happen.') . "\r\n\r\n";
	$message .= __('To reset your password, visit the following address:') . "\r\n\r\n";
	$message .= '<' . site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . ">\r\n";

Great! Thanks for the heads up, and I’m glad you were able to fix it. :)