Access refused by SQL/Script injection protection in main.inc.php (type=1 key=0 value=action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24h36qL1XTzVY0C.l4PCuiU..%2FHHnDYt09CgOdeJN9Jzs%2F2B9U4hZZe page=/kf/custom/kfaccess/kfportal/?action=forgot-password&controller=forgottenpassword&ctoken=%242y%2410%24h36qL1XTzVY0C.l4PCuiU..%2FHHnDYt09CgOdeJN9Jzs%2F2B9U4hZZe)