Fix security issue

'v' parameter of gengraph.php allowed shell command injection.
Reported by Stefan Hanrath.