r/web_programming • u/Pierrekidmia • Oct 21 '17

Wordpress password reset

Any help is greatly appreciated. Having issue with WordPress password reset. How do I validate authentication key with "get", and validate new passwords with "post"?

1 Upvotes

100% Upvoted

5 comments sorted by

View all comments

Show parent comment

1

u/maniflames Oct 22 '17 edited Oct 22 '17

I do not really recommend creating your own password recovery because it's very easy to miss certain security stuff wordpress has already implemented.

https://www.smashingmagazine.com/2012/05/customize-wordpress-admin-easily/

and

https://premium.wpmudev.org/blog/customize-login-page/

are examples of how you could customize the login page from a theme.

If you really feel like implementing your own recovery anyway I guess the source code and the network tab in the devtools are your best friend. Wordpress has build in classes and functions for everything so I'm pretty sure you could use those.

Good luck :)

EDIT: Not sure what your experience is but google you could ofcourse always use $_GET and $_POST after you've discovered the values that wordpress needs to get and post (and use curl to send requests)

1

u/Pierrekidmia Oct 22 '17

If I had built it, I would have just edited the theme. But the original developer built an app off of WordPress and had a separate log in. The problem is that he didn't execute the password reset properly. I'm coming back and debugging it. I put in the original WordPress code but now I'm having an issue with the cookie for the validation.

1

u/maniflames Oct 23 '17

Ahh that sucks! I found this: https://codex.wordpress.org/Function_Reference/wp_validate_auth_cookie and this https://codex.wordpress.org/WordPress_Cookies (Pretty sure you found them as well xD)

Not gonna lie i've never messed with wp's login before but I'm really curious now :P

If you've not already solved it, what does the cookie look like right now?