Additions to #2602:

1. Proper Net_IDNA2 usage. Net_IDNA2::decode() and Net_IDNA2::encode()
accepts only domains, not full URLs. Before this fix framework used
to pass full URLs which is wrong usage.

2. If CEmailValidator or CUrlValidator is being used under PHP 5.3.0+,
native `idn` PHP extension will be used (`idn_to_utf8` and `idn_to_ascii`
functions in particular). Otherwise Net_IDNA2 will be used (for PHP
< 5.3.0).
Fixes #2053:

1. CPasswordHelper has been refactored.

2. CSecurityManager has been enhanced and now able to generate
cryptographically strong random stuff.
UPGRADE note related to #2053.
added note about one should always review gii-generated model validation rules
ru: updated zii messages
ru: updated definitive guide
ru: translated comments in blog tutorial
ru: typo fixes
CSecurityManager:

1. Added /dev/urandom usage.
2. A couple of minor code optimizations.
Non-blocking read from /dev/random is not supported by RedHat 6.*.
Minor CS fixes and @throws docblock clause added.
(CModel::prependValidator(), CModel::appendValidator()) (Enh #2259 rework)
Docblocks fixes and other minor adjustements made.
Tests, code style fixes and changelog gramar corrections
Merge pull request #2607 from creocoder/cmodel-improve

(CModel::prependValidator(), CModel::appendValidator()) (Enh #2259 rework)
Fixes:

1. Blowfish salt should have "./0-9A-Za-z" alphabet and should be 21
characters long. Proper format is: $2a$nn$xxxxxxxxxxxxxxxxxxxxx$

See: http://us2.php.net/crypt

2. CS fixes.
CUrlValidator +  didn't respect custom  value.
Removed unnecessary output.
Fixes #2529: Silenced all chmod calls to prevent "chmod() operation not allowed" error on NTFS
fixed tests