Having used the 'create security pages' wizard, I'm getting the same spurious code
<?php require_once('@@ConnectionPath@@'); ?>
in my forgotten password page. When I remove it, the form appears works as far as the email process, I think, but then I get 'the page isn't working' and no email is received.
The login page works fine
I'm using 2.3.4 Data Assist
UPDATE; I've 'shown errors' and after submitting the form, I get the error shown in the pm.