Patch for potential Sql injection in ORDER()
CS fixes (elseif, indentiation, trailing whitespace)
Merge branch 'security/zf2014-04'

ZF2014-04: Potential SQL injection vector via ORDER clause
[1.12.7] Release readiness

- Updated VERSION constant to 1.12.7
- Added release notes to README.md
Merge branch 'releases/1.12.7'

1.12.7 readiness
Bump version

to 1.12.8dev
Merge branch 'version/bump'

Bump to 1.12.8dev