fixed possible sql injection leaks
move all sql files to protected/data
added SiteConfigBehavior.
i18n translation