Access refused by SQL/Script injection protection in main.inc.php (type=1 key=0 value=action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24al1PCvC.Oi6fktQ94yZvl..%2FMSxsL%2F2hBE45VE3pCZ4TMR7S4WI4C page=/?action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24al1PCvC.Oi6fktQ94yZvl..%2FMSxsL%2F2hBE45VE3pCZ4TMR7S4WI4C)