I recently upgraded to 2.8.1 and now the Forgot Password functionality doesn’t work.
The URLs in my Forgot Password emails look like this: http://www.domain.com/{some_code}/reset_password?&id;={reset_code}
But that results in a 404 page. I am using .htaccess to redirect this URL to the old format:
http://www.domain.com/?ACT=12&id;={reset_code}
This seems to work, but now I am getting “The ID number you submitted does not appear to be valid. Please check the link you followed.”
The {reset_code} corresponds with the code found in the exp_reset_password table, so it should work.