fix sql injection in send_pass
renamed:    upgrade-finished.html -> upgrade-finished.html.php
db converted to InnoDB; improved db upgrade script; script db version bumped to 19
update mysqli db creatoin cshema to v19 (innoDb + bytes in attachment)
remove mysql creation schema. it's duplicate mysqli schema
+ PdoAdapter->getPdo()
new attachment system. attachments stored in db