12
If the site make changes to the pasted URL/code, you can always try with code:
http://mysite.com/modules/profile/lostpass.php?email=xxxxxx@xxxx.xxx&code=0c4b9
If you go and validate the real link that you've received from XOOPS with
http://validator.w3.org/#validate_by_uri
it will come as a valid link.