--- login/confirm.php.orig 2008-10-22 13:10:44.000000000 +0100 +++ login/confirm.php 2008-10-22 13:16:53.000000000 +0100 @@ -21,7 +21,7 @@ if (!empty($data)) { $dataelements = explode('/',$data); $usersecret = $dataelements[0]; - $username = $dataelements[1]; + $username = urldecode($dataelements[1]); } else { $usersecret = $p; $username = $s;