FernleafSystems / Shield-Security-for-WordPress

Reflection of the Shield plugin on WordPress.org
https://getshieldsecurity.com
8 stars 4 forks source link

Password reset URLs are not properly encoded when rename WP Login setting is used #48

Closed paulgoodchild closed 2 years ago

paulgoodchild commented 2 years ago

Reference: https://wordpress.org/support/topic/shield-security-hide-wordpress-login-page-breaks-link-in-password-reset-email/

Conditions:

Result: Password reset link doesn't contain URL encoded username and so the resulting URL is broken.

This appears to be a fault, as far as we can see, with how WP's own add_query_args was working as it wasn't properly URL encoding query parameters.