Fix multiple file inclusion vulnerabilities

 - local file inclusions
 - remote file inclusion
 - directory traversal

 Vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple SQL injections

Vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple XSS vulnerabilities

vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple Response Splitting vulnerabilities

vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix information leakage

vulnerability discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix session fixation vulnerability

discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple XSRF vulnerabilities

vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple Full Path Disclosure vulnerabilities

discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix XSS Reflection vulnerability

discovered by Janek Vind <come2waraxe@yahoo.com>.
Merge remote-tracking branch 'upstream/master'