2.0.3 security fixes
 ! XSS in moderation log page (thanks kingW3 for the report)
 ! Fixed lacking of check on referer URL when adminLogin comes into play

Signed-off-by: emanuele <emanuele45@gmail.com>
2.0.4 security fixes:
 ! Joshua's fix for validatePasswordFlood logic error (reported by Raz0r)
 ! Quick fix for Admin Password Reset vulnerability reported by Raz0r
 ! Directory traversal vulnerability in the function ViewFile (thanks yan.uniko.102 for reporting, Arantor for proposing the fix and Spuds for spotting the undefined variable)
 ! active users cannot change anymore the email from action activate without deactivation/confirmation (thanks BarteX for reporting the issueand suggesting a fix)
 ! Change default language from the admin panel could allow XSS, path disclosure and code injection (thanks Jakub Galczyk for reporting the issue)
 ! Directory listing and editing of arbitrary files from the theme editing page in the admin panel

Signed-off-by: emanuele <emanuele45@gmail.com>