Well, where to found "+" in URL string?

Notification email url is encode string (use urlencode function), it will be "...&p=%2BuYSqDsX". Or not encode "+" some php versions?

But there is no need to use "+" or some other graphic chars.
It will be fix following patch.
--- functions.php	15  3月 2009 19:10:29 +0900	1.29
+++ functions.php	30  5月 2009 15:51:12 +0900	
@@ -585,7 +585,7 @@
 }
 
 function cc_onetime_ticket($genseed="mypasswdbasestring") {
-    return substr(base64_encode(pack("H*",md5($genseed.time()))), 0, 8);
+    return substr(preg_replace('/[^a-zA-Z0-9]/', '', base64_encode(pack("H*",md5($genseed.time())))), 0, 8);
 }
 
 function cc_delete_message($msgid) {

Thank you reporting.