Adding additional parameter in core location method, allowing switching between HTTP/HTTPS
Adding method alias default configuration
Moving logic in checking for invalid controller
Replace mysql_real_escape_string() with addslashes()
Returning NULL in getController when controller is invalid.