Patched an XSS and SQL vulnerability.

Reported by security researcher Alain Homewood, PwC, NZ.
Updated Chyrp version number.
Merge pull request #218 from xhezairi/develop

Patched an XSS and SQL vulnerability.