Patched security vulnerability and warning

PHP warning if URL param "url" wasn't defined. Also, call to file_get_contents() on unscreened user-defined input allows exposure of any server-side code accessible by the web server; added a protocol (http/https) check to patch this.