Making WordPress.org

Opened 6 years ago

Closed 6 years ago

Last modified 6 years ago

#3661 closed defect (bug) (fixed)

Email confirmation link broken

Reported by: yarden's profile yarden Owned by:
Milestone: Priority: high
Component: Login & Authentication Keywords:
Cc:

Description

I tried to change my email address using the form at https://make.wordpress.org/wp-admin/user/profile.php

The confirmation email tells me to click on this link: https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx

This link is broken. It goes to a page that says 'You attempted to access the "Make WordPress" dashboard, but you do not currently have privileges on this site. If you believe you should be able to access the "Make WordPress" dashboard, please contact your network administrator.'

When I add the missing /user/ to the URI, then the link works and my email is confirmed.

Change History (2)

#1 @Otto42
6 years ago

  • Resolution set to invalid
  • Status changed from new to closed

You can't change your email address on the make sites unless you have access to that particular make site in question.

If you need to change the email address for your WordPress.org account, do so through the support forums. It's all the same account, so changing your email there changes it everywhere.

https://wordpress.org/support/users/USERNAME/edit/

#2 in reply to: ↑ description @dd32
6 years ago

  • Resolution changed from invalid to fixed

Replying to yarden:

I tried to change my email address using the form at https://make.wordpress.org/wp-admin/user/profile.php

The confirmation email tells me to click on this link: https://make.wordpress.org/wp-admin/profile.php?newuseremail=xxxxx

This sounds like a Core bug rather than a WordPress.org-specific thing.

That being said, access to make.wordpress.org/wp-admin/user/ shouldn't have been possible for most users, but was due to a weird carve-out for the WordPress.org Handbooks plugin. There was no security issues there, just confusion as updating the profile in the WordPress user admin wouldn't work correctly.

This has now been fixed and the first link in your post is no longer accessible unless you've got a special account.

Note: See TracTickets for help on using tickets.