Add security to $_GET vars
Merge remote-tracking branch 'beeznest/1.9.x' into 7349_4

Conflicts:
	main/mySpace/index.php
Merge branch '1.9.x' into 7349_4
Now show exercises in student session detail
fix session_id used to show lp stats
Remove orig_lp_id = 0 and orig_lp_item_id = 0 from query
Fix for 4.1 point in -refs BT#7349
Merge pull request #2 from DeEvo/7349_4_1

Fix for exercises in reports in BT#7349