Version 2.5.2 release
Protect $_REQUEST['category_id'] against SQL injection
Update CHANGES