security update
stricker path checking for utils/todb.class.php
remove query-string when redirecting to error pages