Reset password link for user with email contained single quote

Hello @ilianskia

Looks like the single quote in the email address is not being properly escaped or encoded in the password reset link, which can lead to the URL being incorrectly interpreted by WordPress. Most email service does not accept emails that contains single quotes because of the problem it can introduce.

To resolve/mitigate this issue, you may want to check the code that generates the reset password link to ensure that it properly handles special characters in email addresses, such as single quotes.

If you don’t have the technicalities to do this, you might just consider reaching out to the site admin to update the email address on the user account this might be the fastest fix or the site admin can do a manual password reset for them.

Best regards

• This reply was modified 2 hours, 59 minutes ago by tarhe.
• This reply was modified 2 hours, 54 minutes ago by tarhe.

Thank you for your reply @obt28
I understand all you explained but the issue is even when default theme and just 3-4 default plugins are used so its WP core issue.
Any suggestions to fix in technical way?

• This reply was modified 2 hours, 57 minutes ago by Ilian.
• This reply was modified 2 hours, 54 minutes ago by Ilian.
• This reply was modified 2 hours, 54 minutes ago by Ilian.

You can check the WordPress code that generates the reset password link to ensure that it properly handles special characters like single quotes for email addresses. This may involve using techniques like URL encoding/escaping to ensure that the link is correctly formed and can be properly interpreted by the WordPress. I found a tutorial here on how to create a WordPress password reset link.

Another way might be to modify the email validation logic to allow single quotes in email addresses. However, this may be more complex, as it could require changes to multiple parts of the WordPress core files that handles the way email works.

You’re also welcome to submit a bug report to the WordPress core team from here.

Regards,

• This reply was modified 2 hours, 42 minutes ago by tarhe.

@obt28 Thanks for your suggestions
i’ve sent bug ticket to WordPress as its not good to do any changes on the core files.
Hope they will reply me soon.

@ilianskia I see you’ve summited a ticket here: the core team should take a look as soon as they have the time.

You can go ahead to mark this ticket as resolved.