Access refused by SQL/Script injection protection in main.inc.php (type=1 key=0 value=action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24PfnZYzSE3pxAp35Wy3sjn.WyglI7B27VMMO73B1..%2Fy9A0gP3LLUu page=/?action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24PfnZYzSE3pxAp35Wy3sjn.WyglI7B27VMMO73B1..%2Fy9A0gP3LLUu)