php variable injection removal

and widget labeling cleanup

then 


![then](https://f.cloud.github.com/assets/1410427/2222596/d8d67d14-9a67-11e3-849a-6599e46529ae.png)

and now

![now](https://f.cloud.github.com/assets/1410427/2222608/114cfe7a-9a68-11e3-900a-9375fdbe4671.png)