Page 1 of 1

[Fixed]Password reset function sends buggy links

Posted: 19 Oct 2013, 10:00
by TMarc
At the website login page http://http://player.maniaplanet.com/ there is a link to reset the password: http://login.maniaplanet.com/index.php? ... =&forgot=1

A user wanted to reset his password since he had forgotten it after a while.
But the link that was sent to him was not working (and he tried several times), he always got the following error message:
Some parameters are missing: activationkey
I tried to reset my password, and it was working fine for me, so I asked the user to try again and to send me his new password reset link.
The cause of the issue is very obvious now.

He got a link that looks like this:

Code: Select all

http://mp05.maniaplanet.com/game/activate_account_info.php?info=password&login=PlayersLogin&activatiRAHqEzkHzi&language=en
But the correct link needs to look like this:

Code: Select all

http://mp05.maniaplanet.com/game/activate_account_info.php?info=password&login=PlayersLogin&activationkey=RAHqEzkHzi&language=en
You see the difference: the activationkey keyword is shorten in his faulty link.

Since I have got a reset link for mp02, I presume a issue with the password reset link generator for mp05.

@Nadeo: Please also check the other servers ;)