Checked visualize for intance of SQL injection and found none.
Refactored q() to take a new optional $params array parameter.
Refactored controllers for SQL injection.
initial check in of captcha
Checked remaining q() and findbyPk() function calls for SQL injection and corrected as necessary.
Checked and fixed SQL injection in findByAttributes() calls.
Added maxUploadFileSize config and use it when validating imported study files.
Add file type & size validation in import controller.
Reverting ImportExportController.php.
initial check in of cross site scripting prevention
Merge branch 'file_validation' into dev
Merge branch 'sqlinject' into dev

Conflicts:
	egowebWebApp/plugins/visualize.php
	egowebWebApp/protected/controllers/DataController.php
	egowebWebApp/protected/models/Expression.php
	egowebWebApp/protected/models/Interview.php
	egowebWebApp/protected/models/Study.php
	egowebWebApp/protected/views/data/visualize.php
api update
Merge branch 'dev' of https://github.com/qualintitative/egoweb into dev
fixed typo in q function (custy)
api controller
interview permissions
note fix
security sql fix
security fix debug