I am using OJS 3.4.0.1
Reset my password: {$lostPasswordUrl}
I am having the same issue:
Reset my password: {$lostPasswordUrl}
The question for the meantime is how to reset the password from the database (phpMyAdmin)
Thx
Hi all,
This issue is filed and fixed here:
opened 03:18PM - 26 Jun 23 UTC
closed 01:00PM - 13 Jul 23 UTC
Bug:2:Moderate
**Describe the bug**
See https://forum.pkp.sfu.ca/t/password-reset-isnt-working… -as-expected/79422
`lostPasswordUrl` email template variable isn't replaced by the actual value.
This regression seems arises from https://github.com/pkp/pkp-lib/issues/8635#issuecomment-1431698517 where `passwordResetUrl` [was replaced](https://github.com/Vitaliy-1/ojs/commit/b144964191e8c6c0de819d8d55ff96626b7d24d2) by `lostPasswordUrl` in `PASSWORD_RESET_CONFIRM`. The initial intent for this replacement was to avoid exposition of password reset hash in the log for review reminder emails.
We don't have `lostPasswordUrl` but have `passwordLostUrl` email template variable composed from the Context, see `PKP\mail\variables\ContextEmailVariable::PASSWORD_LOST_URL`. But I think we can return `passwordResetUrl` with the hash there as it's not exposed anywhere and user requests it.
It looks relevant only for fresh installs as this regression wasn't included in the migration script
**To Reproduce**
Steps to reproduce the behavior:
1. Install OJS 3.4
2. Set the default mailer to the log in OJS config
3. Register a user
4. Go to the reset password from
5. Send an email with the link to reset the password to that user
6. See the log for the variable not being replaced
**What application are you using?**
OJS, OMP or OPS 3.4 stable, main branch
The fix will be released with OJS/OMP/OPS 3.4.0-2.
Regards,
1 Like