Security: don't expose PHP version in email header

Also generate reg code for #18. Still needs storing in the database though.