Fixed #2 #3 #4 I didn't change the template parser but prevented action & lang params to be filled with crap (preg_replace), Other GET or POST parameters have to be clean by the app