#3661 closed defect (bug) (fixed)
Email confirmation link broken
Reported by: | yarden | Owned by: | |
---|---|---|---|
Milestone: | Priority: | high | |
Component: | Login & Authentication | Keywords: | |
Cc: |
Description
I tried to change my email address using the form at https://make.wordpress.org/wp-admin/user/profile.php
The confirmation email tells me to click on this link: https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx
This link is broken. It goes to a page that says 'You attempted to access the "Make WordPress" dashboard, but you do not currently have privileges on this site. If you believe you should be able to access the "Make WordPress" dashboard, please contact your network administrator.'
When I add the missing /user/ to the URI, then the link works and my email is confirmed.
Change History (2)
#2
in reply to:
↑ description
@
6 years ago
- Resolution changed from invalid to fixed
Replying to yarden:
I tried to change my email address using the form at https://make.wordpress.org/wp-admin/user/profile.php
The confirmation email tells me to click on this link: https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx
This sounds like a Core bug rather than a WordPress.org-specific thing.
That being said, access to make.wordpress.org/wp-admin/user/
shouldn't have been possible for most users, but was due to a weird carve-out for the WordPress.org Handbooks plugin. There was no security issues there, just confusion as updating the profile in the WordPress user admin wouldn't work correctly.
This has now been fixed and the first link in your post is no longer accessible unless you've got a special account.
You can't change your email address on the make sites unless you have access to that particular make site in question.
If you need to change the email address for your WordPress.org account, do so through the support forums. It's all the same account, so changing your email there changes it everywhere.
https://wordpress.org/support/users/USERNAME/edit/