Recent Topics

Password reset: Reset-Link links to a 403

Started by on May 14, 2018 – Contents updated: Jun 25, 2018

May 14, 2018 20:29    

Hello,

A user told me, that a link, sent by the system to reset the password leads to a 403 error page.I could reproduce the bug. But I can not figure out, how to fix this.
Could anyone of you give support and help?

Here is the screenshot (first the e-mail with the link and the error page with the url cause that 403)

May 14, 2018 20:39

What I figured out, yet:

This blog runs by subdomain.
But the URL for resetting the passwod mixes up both: subdomain and base_url (e.g. https://tourismus.genba.org and https://www.genba.org/blogs/ …)

The link, sent to reset password was:
https://tourismus.genba.org/blogs/htsrv/login.php?action
instead of
https://fokus.genba.org/htsrv/login.php?action (which works)

May 31, 2018 00:47

@saunders can you please also confirm that https://www.genba.org/blogs/htsrv/login.php?action works?

Jun 25, 2018 14:36

Hello @saunders, I could reproduce the bug with following configuration:

  • $baseurl = 'http://b2evo.yb/blogs/'; is used as URL of Home collection (this domain is linked to path like /www/b2evo/, but the b2evolution root is located in the folder blogs/ really)
  • URL of Blog A = http://sub.b2evo.yb/ (this domain is linked to path like /www/b2evo/blogs/)

A wrong URL is http://sub.b2evo.yb/blogs/htsrv/ when we requested a password reset from Blog A.
When a request from Home collection a result was correct http://b2evo.yb/blogs/htsrv/ as expected.
After my fix in commit https://github.com/b2evolution/b2evolution/commit/06b0f804fef5704a2d4e19b23949aa1ee88fff81 the URL is correct for Blog A = http://sub.b2evo.yb/htsrv/ and for Home = http://b2evo.yb/blogs/htsrv/.
So currently it must works as expected, please check this, thanks.

Jun 25, 2018 15:53

@yurabakhtin Great! That fix works pretty fine and solved the problem! Thanks! Awesome support


Form is loading...

powered by b2evolution – This forum is powered by b2evolution CMS, a complete engine for your website.