Fixing some security issues

With this commit i am emergency fixing some security
problems of the PHP part. It's not a final fix, but
it should cover the most cases.

The function include cleanParams() from the functions.php
should be called on top of every script to secure user
input.

Signed-off-by: Leo Unglaub <leo@leo-unglaub.net>