After my last post on how to reset your WordPress password manually, people have asked for the patch and the changed files for the bug in 2.5.1. I’ve grabbed these files straight from Trac, so they should work (hopefully 
).
Most users will want the changed files zip. To use this, extract the archive into your wordpress directory and upload wp-login.php and pluggable.php.
For users who wish to use the patch, I’ll assume you know how to do that
Edit: If this appears not to work, Doug has kindly worked out why and notes how to fix that. Thanks Doug!
Comments (18)
This patch does not work for me.. what sould I do?
@Gigi: What do you mean by it “doesn’t work”?
I’m not having any luck with it either. It’s giving me the same key (including a ^) as it was before I uploaded the changed files, if that’s helpful.
Well, the patch is taken from the core WordPress patch, it *should* work.
Are you sure you’ve uploaded them correctly?
I’ve uploaded the files, and they do not work for me either. I’m pretty confident that I did it right.
Well, I tried your manual reset the MySQL way, and that worked like a charm. Thanks a bunch!
Hmm, well, that’s a plus
The patch did not fix the problem for me either. Are you sure the patch contains the whole fix?
Indeed, I see additional patches are required, looking at the Trac ticket.
It appears that if the wp_users table already contains an activation key, it is not cleared before a new one is generated after installing the patch; thus, the patch appears to not work. In fact, it does.
After installing the patch:
For my account, the link in the reset email still contained an allegedly invalid key. When I had a colleague try, the activation key was indeed 20 characters and her email link did contain a valid key.
Next step is to remove my activation key from the wp_users table and try the password reset again.
Thanks for making the solution available!
Doug
Thanks Doug! I’ve added a link to your comment from the main post, which might help everyone this isn’t working for.
How/Where do I access and edit that wp-user table through the files?
P.S. : You’ll need to use phpMyAdmin or something like it, as it is in your database.
no, the patch doesn’t work, even with this tip. I used phpMyAdmin, removed the activation key in the database, requested a new key, and the new key doesn’t work either. Every time a request a new key now it is a different set of characters.
Oops. I had deleted the activation_key field by mistake. When I recreated it worked.
Thank you SO much! This worked perfectly!
Thanks to you all. The post here have help solve the issue of password retrival
Thanks guys. This worked like a charm.
Trackbacks/Pingbacks (28)
[...] Ryan has included the files which contain the patch that you can download here (No Ratings Yet) Loading … Sphere: Related Content [...]
[...] If you’re not comfortable with PhpMyAdmin or you don’t to do it manually, as an alternate, you can download files which contain the patch, here. [...]
[...] con iscrizioni aperte può invece scaricare il file di correzione resi disponibili sempra da Ryan qui. Nessun tag per questo [...]
[...] chi non volesse attendere la 2.5.2, è possibile scaricare i singoli file da sostituire andando sul blog di Ryan McCue e cliccando su Grab the changed files (zip) tags: open-source, Software, WordPresscategorie: [...]
[...] della release 2.5.2, é possibile già da ora scaricare i due file sostitutivi (Reset Password Bug: Patch and Fixed Files) contenenti la patch di [...]
[...] Solucionar el bug de las contraseñas [2.5.1] [...]
[...] Por supuesto, puedes cambiarla diretamente en MySQl, pero si no puedes esperar, aquí tienes los dos ficheros que resuelven el [...]
[...] La solución es bastante simple, Ryan McCue propone modificar 2 ficheros: [...]
[...] La nueva versión de WordPress ha salido hace nada y ya han han encontrado un bug, lo he visto en aNieto2K, como es habitual Hector avisa de la detección de un bug grave en Wordpress 2.5.1. Al parecer, el link enviado por email con la contraseña generada que Wordpress nos devuelve al resetear la contraseña no funciona imposibilitando acceder al blog despues de hacerlo. La solución es bastante simple, Ryan McCue propone modificar 2 ficheros [...]
[...] solución pasa por actualizar a la versión 2.5.1 (si no lo hubieras hecho ya) y descargarte los ficheros [...]
[...] solución pasa por actualizar a la versión 2.5.1 (si no lo hubieras hecho ya) y descargarte los ficheros [...]
[...] actualié el blog. Tan sólo me tomo dos horas y unos minutos para subir unos parches que necesita, pues ya tiene un bug que te manda a tu mail un link que no sirve si se te olvida la [...]
[...] Por supuesto, puedes cambiarla diretamente en MySQl, pero si no puedes esperar, aquí tienes los dos ficheros que resuelven el [...]
[...] no funciona imposibilitando acceder al blog después de hacerlo. La solución es bastante simple, Ryan McCue propone modificar 2 ficheros. Realizar un Comentario RSS de Comentarios Artículo anterior a este: XP podría [...]
[...] solución es bastante simple y Ryan McCue nos la enseña en su blog, solo hay que modificar estos 2 [...]
[...] solución es bastante simple y Ryan McCue nos la enseña en su blog, solo hay que modificar estos 2 [...]
[...] solución pasa por actualizar a la versión 2.5.1 (si no lo hubieras hecho ya) y descargarte los ficheros [...]
[...] La solución (temporal) es bastante simple: Ryan MacCue explica la solución con solo editar dos archivos. [...]
[...] Ryan McCue’s tutorilal if you want to reset your password with PhpmyAdmin, or download his patched [...]
[...] the password recovery links wouldn’t work as designed. The patched files can be downloaded from the user who discovered the problem, and used on your site, replacing the 2.5.1 [...]
[...] Beh, poco male; Ryan ha già sistemato il problema sviluppando la seguente patch, scaricabile nel suo blog, a questo link. [...]
[...] Solucionar el bug de las contraseñas [2.5.1] [...]
[...] WordPress 2.5.1 was released April 25th, and includes a significant security fix, so you should update as soon as possible if you haven’t done so already. This version does break the reset password feature, however. (Thanks to Ryan McCue for providing a patch file.) [...]
[...] WordPress 2.5.1 was released April 25th, and includes a significant security fix, so you should update as soon as possible if you haven’t done so already. This version does break the reset password feature, however. (Thanks to Ryan McCue for providing a patch file.) [...]
[...] hittade en patch till wordpress som sägs funka, men inte då. Vem vet, den kanske funkar för er. Här hittar du den. Jag fick i alla fall gå in i Sql databasen och manuellt ändra lösenordet vilket inte va så [...]
[...] over to Ryan McCue’s Blog, grab his patched files (zipped file containing two files: wp-login.php and [...]
[...] solución es bastante simple y Ryan McCue nos la enseña en su blog, solo hay que modificar estos 2 [...]
[...] WordPress 2.5.1 was released April 25th, and includes a significant security fix, so you should update as soon as possible if you haven’t done so already. This version does break the reset password feature, however. (Thanks to Ryan McCue for providing a patch file.) [...]