lighttpd: 1.4.33 -> 1.4.35 [fixes a SQL injection bug]