Access refused by SQL/Script injection protection in main.inc.php (type=1 key=0 value=action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%243ho9wOT9qJhzP7On3wj3euvm7z5%2FDoH2iVepxK6gNlan59DY..%2FDy page=/?action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%243ho9wOT9qJhzP7On3wj3euvm7z5%2FDoH2iVepxK6gNlan59DY..%2FDy)