This is still a bug in MODx Evolution 1.0.2, happens with XHTML URLs turned on.
Attached is a fixed weblogin.processor.inc.php
// built activation url
// fix (2010-01-02) for "Another weblogin error"
// http://modxcms.com/forums/index.php/topic,22250.0.html
// to prevent & in forget password confirmation e-mail
$orgxhtmlconfig = $modx->config[’xhtml_urls’];
$modx->config[’xhtml_urls’] = false; // turn off xhtml urls
if($_SERVER[’SERVER_PORT’]!=’80’) {
$url = $modx->config[’server_protocol’].’://’.$_SERVER[’SERVER_NAME’].’:’.$_SERVER[’SERVER_PORT’].$modx->makeURL($modx->documentIdentifier,’’,"webloginmode=actp&wli=".$row[’id’]."&wlk=".$newpwdkey);
} else {
$url = $modx->config[’server_protocol’].’://’.$_SERVER[’SERVER_NAME’].$modx->makeURL($modx->documentIdentifier,’’,"webloginmode=actp&wli=".$row[’id’]."&wlk=".$newpwdkey);
}
$modx->config[’xhtml_urls’] = $orgxhtmlconfig; // reset to original value