Fix issue with attr_protected where malformed input could circumvent
protection

Fixes: CVE-2013-0276
bumping to 3.1.11