sql-injection fix in deleteDisclosure function
cross-scripting vulnerability fix in letter generator