Password recovery email missing value of $_CONF['site_url'] in the message sent to users.

[cygnus8929]

The email message sent to users that click the Forgot Password link on the login page is missing the content of the $_CONF['site_url'] variable in the message that is sent to the user. The image below is the message sent from glfusion.org. The area of the missing content is circled.

I looked at the text defined in $LANG04[88]. If the <> is removed from around {$_CONF['site_url']}, the site_url appears in the text. Having the <> surrounding the URL is a good idea, but I could not figure out a way to make it happen without putting spaces between the <> and {}, which did not look good in the message.

Is this a behavior with the templating system? "<{$" is pretty close to "<$", the latter necessary for embedding PHP in a template.

[mark0263]

Good catch - I'm actually reworking the entire authentication system which includes updating these emails as well. We'll get it fixed up for the next release.

[cygnus8929]

I just upgraded to 2.0.1 and attempted to temporarily fix this issue in my deployment. It appears that this has already been fixed. Here is the entry from $LANG04[88] on github: Someone (possibly you) has requested a new password for your account \"%s\" on %s, <%s>.

Here is the code from users.php, line 491:
$T->set_var('content_text',sprintf ($LANG04[88], $username,$_CONF['site_name'],$_CONF['site_url']) );

So I think this issue can be closed.