- Make sure $custom_fastcgi_php_ini_dir is a directory.

- Merged language files.

- Extended the tform ISIP check and added the options 'allowempty' and 'separator'

- Bugfix: when you delete a client with a web site, website symlinks have to be deleted from the client directory before the client directory is deleted (because otherwise the client directory cannot be deleted).

Improved faukt tolerance of the server.sh process when master DB becomes inavailable during script run multiserver setup.

- Added mousedown event to readonly tab (web domain and web vhostsubdomain forms) so that select boxes do not expand (Chrome, IE, Safari).

- Changed regex for redirect path (Web sites, subdomains, vhost subdomains, alias domains) and web folder (vhost subdomains) so that ".." is not allowed (in order to prevent path traversals).
- nginx: don't allow folders for proxy redirects (subdomains and alias domains); URL is required.
- nginx: modified rewriting.

 - included a maximum loop count of 10 on connection errors
 - added check of mysqli ping() result

- nginx_merge_locations function now supports locations that are in one line (like "location /webftp/conf/ { deny all; }").

- Disabled "fastcgi_param PATH_INFO $fastcgi_script_name;" in nginx vhost template (see http://gunblad3.blogspot.de/2009/07/nginx-php-fpm-serverphpself-returning.html ).

 - on new vhost subdomain the php modes were not correctly displayed (nginx)
 - on vhost subdomains and domains the default php mode stated "fastcgi" even if it was not available

 - passwords are now enrypted already in tform (and remoting) and not stored in datalog clear text
 - clientdb plugin no longer encrypts password itself but receives crypted password