xss attack vector in bbcode.php - check for proc_open being disabled for security reasons in install