I'm somewhat embarrassed to say, this is almost certainly an issue with register globals. I vaguely remmember discovering the related variables were not properly assigned when testing the current beta version.
Looking at the related file..
/include/lost.php
The current version has this near the top , adding it to your friend's version should correct the issue
| Code: |
<?php
// *******************************************************************
// include/lost.php
// *******************************************************************
if (is_numeric($_GET['ID'])){$ID=$_GET['ID'];}
$Email = $_POST['Email'];
$get_password = $_POST['get_password'];
|