Added check for PHP version
Check that a hash was actually generated in make_passhash
Don't htmlspecialchar challenge descriptions