Make sure the ctrl.php script an only run oath, product and order controllers
Merge pull request #7 from PrestaShop/hotfix/minor-security-issue-#6

Make sure the ctrl.php script can only run valid controllers