VBIran patch Prevents the url varible from being exploited in lostpw requests 1.0 login phishing patch init_startup url = $vbulletin->options['bburl']; }]]>