*** wp-login.php	2010-02-03 07:37:40.000000000 +0700
--- /home/astadev/www2/cakning.local/wp-login.php	2009-12-15 21:07:09.000000000 +0700
***************
*** 335,340 ****
--- 335,344 ----
  
  case 'resetpass' :
  case 'rp' :
+    if (is_array($_GET['key'])) {
+       die("<strong>Hacking detected.</strong>");
+       exit();
+    }
  	$errors = reset_password($_GET['key']);
  
  	if ( ! is_wp_error($errors) ) {