Thread: User login error and forgot password link

User login error and forgot password link

Hi team,

I upgraded from 3.1.4 to 3.1.5 using only the Patch files
I'm running on WPMS (Multi site) and aware of the username forced to use small letters upon account creation
Re-Captcha is enabled
User registration is set to System password generated (user receives the email with the temp password)

I flagged this issue before in this thread


I'll rephrase the scenario to avoid any confusion in reproducing the exact same steps:
+ Account created and logged in successfully the first time.
+ If I sign out and try logging in again by entering the correct username with a wrong password, I get the following error:
ERROR : The password used for this username is not correct. Did you forget your password?

The LINK associated to the Error message "Did you forget your password?" is pointing to the user's profile when it should be pointing to the "wp-login.php?action=lostpassword" link

This is ONLY happening if I enter a valid username combined with the wrong password, yet if I enter a bogus username and bogus password, the link for the Forgot password is correct (/wp-login.php?action=lostpassword)

Any idea? Or which file handles pushes this error message so I can go in and edit it to reflect on the right path?