Security Audit
- reviewed escaping of userinput
- fixed some bugs