Re: Reset community password somewhat broken?

[Stefan Kaltenbrunner <stefan(at)kaltenbrunner(dot)cc>]

Chander Ganesan wrote:
> Stefan Kaltenbrunner wrote:
> > Chander Ganesan wrote:
> > > One of my co-workers is unable to reset her community password.  She 
> > > gets the following response from the server:
> > >
> > > Internal Server Error
> > > Recovery key not found for user!
> > >
> > > If you want/need to look up her account on the server, the user 
> > > portion of her email address is 'amy', same host as my email address...
> >
> > I guess that error happens after clicking the URL mentioned in the 
> > email  sent after asking for a new password?
> > From a quick look it seems that there is some insufficient URL 
> > escaping going on in that code path and it might be that 
> > failure/success in resetting might depend on the browser used.
> > I will look into the underlying issue but it would be interesting to 
> > know what OS/browser combination is used here.
> Windows XP and firefox...

this is actually a more subtile issue :) what happens here is that by 
pure chance the resethash generated is ending with a "." and firefox is 
helpfully stripping that from the url if you simply click it...

For now either copy & paste the url to your browser or ask for another 
reset (causing a new hash to be generated).



Stefan