Users can't reset the password "You did not provide a password reset token"

Get help with installation and running phpBB 3.3.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
Drago050
Registered User
Posts: 2
Joined: Fri Oct 16, 2020 2:13 am

Users can't reset the password "You did not provide a password reset token"

Post by Drago050 »

Support Request Template
What version of phpBB are you using? phpBB 3.3.1
What is your board's URL? http://private
Who do you host your board with? Digital Ocean
How did you install your board? I used the download package from phpBB.com
What is the most recent action performed on your board? Update from a previous version of phpBB3
Is registration required to reproduce this issue? Yes
Do you have any MODs installed? No
Do you have any extensions installed? Yes
What version of phpBB3 did you update from? phpBB 3.0-B1
What extensions do you have installed? Advanced BBCode Box, phpBB Media Embed PlugIn, VigLink, Antispam by CleanTalk
What styles do you currently have installed? ProLight (https://www.phpbb.com/customise/db/style/prolight/)
What language(s) is your board currently using? British English
Which database type/version are you using? MySQL 5
What is your level of experience? New to phpBB but not PHP
What username can be used to view this issue? No answer given
What password can be used to view this issue? No answer given
What actions did you take (updating your board; installing a MOD, style or extension; etc.) prior to this problem becoming noticeable? I updated my phpbb version from 3.3.0 to 3.3.1, however looks like i had this problem before that.
Please describe your problem. When a registered user try to recover her/his account (using the "I forgot my password" form), the link to reset the password doesn't work. i show "You did not provide a password reset token." in the page.

Ok, let's imagine you have an account but you forgot your password, so you click on "I forgot my password" (forum.com/app.php/user/forgot_password), then you type your email and press "Submit" button.

You receive an email with something like this:

Code: Select all

Hello User
    You are receiving th.....
    To reset your password, please click the link provided below:

    https://forum.com/app.php/user/reset_password?u=100&token=qh9kl...4a....aml

    If you did not.....
So you open the link but when the page is displayed, it show a message with: "You did not provide a password reset token."

Basically that's the problem. I'm not sure if the sent link in the email is not correct or if the "forgot my password" token is not saved in the DB when you type your email before or what.

The forum didn't have this problem before, i know because i remember that was working, i tested before when i began the forum.

I began the forum in local when the latest version was phpBB 3.2.7. I installed it, then i added the ProLight Style on the forum and 2 extensions ("phpBB Media Embed PlugIn" and "Advanced BBCode Box"). After that i modified some css styles (on ProLight) and after that the new version was released (phpBB 3.2.8) so i updated using the Automatic update.
After i updated the forum, i upload it to the server and tested it and everything was ok, the "i forgot my password" and other actions were working without problems.

For some reason i let the project for a while and when i was back, the 3.3.0 version was released so i updated the forum again using the Automatic update (i always updated my extensions before update the forum). Maybe in this update i got the problem but i didn't notice. The latest extension installed was this: "Antispam by CleanTalk". It works fine.

2 weeks ago i updated the forum again to phpbb 3.3.1, with the Automatic update. Then i noticed the "I forgot my password" was not working properly :(

Always when i used the Automatic update, never had a problem.

This is what i tried:

1. Tested the forum when it was phpbb 3.3.0 but it didn't work, same problem.

2. Keep the 3.3.1 version and disabled my latest extension "Antispam by CleanTalk", purge the cache and then test the recover password form but didn't work, same problem.

3. Numbers 1 and 2 but using phpbb 3.3.0 but didn't work.

4. I tried this: viewtopic.php?f=661&t=2549011 . I modified the reset_password.php file with this https://raw.githubusercontent.com/phpbb ... ssword.php, then purge the cache and tested the form, but it didn't work, same problem.

i didn't find other similar solved issues to try in this forum.

With all examples i always checked if i had any errors in the ACP ("Admin log", "Moderator log", "User log", "Error log") but it never displayed something about it. The forum never displayed a php error and the server doesn't have any error log with something about my problem. I don't know what to do now :(

Users can register, they can modify their password when they are logged in, create topics, etc, everything looks like working but i have that problem with the "reset password" message.

Please help.

I don't know if this helps but here are some extra info about the server:
php 7.2
mysql 5.7.3
server with nginx, not apache

Thanks
Generated by SRT Generator
Drago050
Registered User
Posts: 2
Joined: Fri Oct 16, 2020 2:13 am

Re: Users can't reset the password "You did not provide a password reset token"

Post by Drago050 »

I still have this problem so i tried some ideas i had.

I downloaded the latest version again (phpbb 3.3.1) from here https://www.phpbb.com/downloads/, then i replaced/deleted all files and folders following this steps https://www.phpbb.com/support/docs/en/3 ... upgrade32/ ,except number 12 and 13 because my database is already upgraded.
For this case i didn't use the Automatic Update, i did manually but i still have the problem, users can't reset the password, the link from the sent email display a page with "You did not provide a password reset token".

I'll try other idea i have but if you know how to solve this issue, please comment it :D
User avatar
AmigoJack
Registered User
Posts: 5782
Joined: Tue Jun 15, 2010 11:33 am
Location: グリーン ヒル ゾーン
Contact:

Re: Users can't reset the password "You did not provide a password reset token"

Post by AmigoJack »

https://forum.com/app.php/user/reset_password? looks suspicious - it should be https://forum.com/ucp.php?mode=sendpassword.... Likewise https://www.phpbb.com/community/app.php/user/reset_password?u=666&token=doesntmatter does not even exist, but https://www.phpbb.com/community/ucp.php?mode=sendpassword does. How does the link for you look like where you type in the e-mail address?

Chances are all parameters get lost in the former case - the error message you quoted is only printed if the parameter token= is empty or does not exist - it's not about a mismatching or outdated one.
  • The worst thing about censorship is ███████████
  • "The problem is probably not my English but you do not want to understand correctly. ... We will not come anybody anyway, nevertheless, it's best to shit this." Affin, 2018-11-20
  • "But this shit is not here for you. You can follow with your. Maybe the question, instead, was for you, who know, so you shoved us how you are." axe70, 2020-10-10
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 26852
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: Users can't reset the password "You did not provide a password reset token"

Post by Paul »

https://forum.com/app.php/user/reset_password is the right URL when using 3.3.x, this board isn't using 3.3.1 yet, and as such you can't use it to compare those URLs.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development
User avatar
AmigoJack
Registered User
Posts: 5782
Joined: Tue Jun 15, 2010 11:33 am
Location: グリーン ヒル ゾーン
Contact:

Re: Users can't reset the password "You did not provide a password reset token"

Post by AmigoJack »

But Area51 does not contain /app.php/ either:
  • The worst thing about censorship is ███████████
  • "The problem is probably not my English but you do not want to understand correctly. ... We will not come anybody anyway, nevertheless, it's best to shit this." Affin, 2018-11-20
  • "But this shit is not here for you. You can follow with your. Maybe the question, instead, was for you, who know, so you shoved us how you are." axe70, 2020-10-10
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 26852
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: Users can't reset the password "You did not provide a password reset token"

Post by Paul »

And that is simply because mod_rewrite options are enabled on area51, which are optional.
https://area51.phpbb.com/phpBB/app.php/ ... t_password is the same as https://area51.phpbb.com/phpBB/user/forgot_password
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development
Post Reply

Return to “[3.3.x] Support Forum”