Fixed two flow manipulation security issues in functions.php.
Added a default of page 1 and asc to list.php