Access refused by SQL/Script injection protection in main.inc.php (type=1 key=0 value=action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24ddObOtMCEs6VA0MPWQbtm..%2F4lqpv63S0lYhKOMU310Fp.3ZYuQD2 page=/custom/externalaccess/www/?action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24ddObOtMCEs6VA0MPWQbtm..%2F4lqpv63S0lYhKOMU310Fp.3ZYuQD2)