Upgraded h() function.
Fix options['order'] also being vulnerable to injection attacks.
Bump version number to 1.3.17

We missed a commit in 1.3.16 and need to make a new tag.
Merge branch '1.3' of git://github.com/cakephp/cakephp into 1.3
Trigger error when dbo source is not enabled.
Merge pull request #1444 from mathop/1.3-dbo-source

Trigger error when dbo source is not enabled.
Merge branch '1.3' of git://github.com/cakephp/cakephp into 1.3