improved the fix for bug #66395

- fixed the traverse vulnerability in case like c:d:file.txt
- ensure paths containing NTFS streams are still worky
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  improved the fix for bug #66395
one more extension for the basename test
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  one more extension for the basename test