Update project.class.php

escape ref of project if as ' is typed inside as ref (crazy user)
Merge pull request #1427 from defrance69/patch-32

Update project.class.php