remove zonename before testing for allowed two dots.
disallow two consecutive dots.
disallow empty names.
improve regex for checking validity of email address. simplify the function.
improve "Home" translation
addslashes are not the solution for SQL Injection (for now we keep using mysql_real_escape_string)
and do nothing for XSS; get rid of it and use xssafe function for displaying user-supplied data.