Hi,
When a user of my site iosre.com tried to reset his password this morning, he received an email containing a resetting URL, in the form of Admin Login, and when he clicked it, it redirected to the homepage.
When I tried to reproduce the bug, the resetting URL I received was in the form of Reset Password - iOSRE, and it worked as expected.
So I told him to replace admin-login with password-reset and try again, it worked.
Is that a bug?
Thanks,
Yinglu