CVE-2022-0083: User enumeration in livehelperchat

The vulnerability stemmed from different system responses during password reset attempts. The key modification was in forgotpassword.php where the else clause originally performed a redirect (for non-existent users) versus rendering a template (for existing users). This created an observable difference in behavior (HTTP 302 vs 200) that attackers could exploit to determine valid user emails. The template message in forgotpasswordsent.tpl.php was also made more generic to avoid revealing existence status, but the primary vulnerable logic was in the controller's flow control.