function cleanCSV($string)
{
    $check = '/^[=@]/';
    if (!is_numeric($string)) {
        $check = '/^[=@+-]/';
    }

    return preg_replace($check, "", $string);
}
The software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.