edit

tm/lib/Controller/Login.class.php

@@ -84,7 +84,7 @@ class Login extends Controller{
 
             if (isset($data['nickname']) && $data['nickname']) {
                 $refer = urldecode($this->objMemcached->get($this->refer));
-                $refer = str_replace('&', '&');
+                $refer = str_replace('&', '&', $refer);
 
                 $param['nickname'] = $data['nickname'];
                 $param['headimgurl'] = $data['headimgurl'];