Activation Key to be urlencoded in retrieve password mail

[f00f]

Hi,
it happened to one of my users, that the activation key mailed to him when he wanted to reset his pwd contained a pound sign (#). The result was that he got an "invalid key" error, because the pound and everything thereafter was not considered part of the key parameter.
Solution: urlencode the key in the link mailed to the users, see patch.

Tested on 2.5.1 and current svn version (close to 2.7)

[mrmist]

This should have been fixed as part of #6842

There is some discussion of it there. Believe it was sorted in 2.6.

[DD32]

Believe it was sorted in 2.6.

Should've fixed in 2.5.2 too. However, I believe i may have seen a hash in a created password, so checking the activation key is working correctly should probably be done

[markjaquith]

Already fixed.