Update cryptographp.fct.php

added for validation:

alt="captcha" and alt="reload"
escaped & - symbol with &amp;

tested captcha complete by adding wrong letters. 
i also made a password-reset succesfully for testing