One of my subscribers wrote to me, that she can’t change her forgotten password, because the site is returning “Password reset is not allowed for this user” error. After selectively disabling plug-ins and rechecking on an other wordpress site it became obvious that the Login Security Password Reset feature was causing the problem.
The interesting part is that the Password Reset was on Enable and the error still came up. After some trial and error I figured out that if the Login Security Feature is Turned Off then the Password Reset option is reverting to disabled. This shouldn’t be the desired behaviour for those who don’t want to use the Login Security part. If I turn the Login Security On, than the Password Reset feature is working again as expected.
The switch statment, in the includes/login-security.php file should probably be reformulated so that to take into account the case when Login Security is Turned Off and Password Reset to remain enabled.
-
This topic was modified 1 day, 6 hours ago by
AITpro Admin.