several crucial and critical fixes

pass-by-reference error for PHP5.4+ fixed
"create new" link fixed to point to valid page
strip slashes on quotes in message body