- Fixed FS#2733 - The Linux shell users of a website does not get removed when the website is removed.

- Fixed "usermod: user web25 is currently used by process 8106" error when a site is moved between clients.

- nginx: Fixed error messages of server cron when moving websites with vhost subdomains between clients.

- Bugfix: when you delete a client with a web site, website symlinks have to be deleted from the client directory before the client directory is deleted (because otherwise the client directory cannot be deleted).

- Changed regex for redirect path (Web sites, subdomains, vhost subdomains, alias domains) and web folder (vhost subdomains) so that ".." is not allowed (in order to prevent path traversals).
- nginx: don't allow folders for proxy redirects (subdomains and alias domains); URL is required.
- nginx: modified rewriting.

- nginx_merge_locations function now supports locations that are in one line (like "location /webftp/conf/ { deny all; }").

- nginx: added security checks when deleting vhost subdomains, so no paths still used by other subdomains or the main web get deleted accidently
- added check for vhostsubdomains to remove beginning and trailing slashes from web path.
- removed check for duplicate folder usage.

- Extended SEO redirect check for subdomains/alias domains.

- Make sure alias domain SEO redirects get written only if they don't collide with SEO redirects from parent web site.

- Several changes in SEO redirects implementation.

- Added PayPal email address field to client and reseller form.
- Added missing bank details fields to reseller form.

- nginx alias/subdomain redirects: Added parenthese around non-capturing parentheses so that $2 captures the correct content.

- Added missing language strings to german language file.