this is a problem on the server that will need to be corrected by the host.
I added the following code to the form legend on the forgot password page:
PHP_SELF: <?php echo($_SERVER["PHP_SELF"]); ?>
the Server PHP_Self variable should return the server relative path to the page:
but in your case, it is return ing the domain name as well, which it should not do:
you will need to have the host correct the problem so that the PHP_SELF variable properly returns only the server relative page name