Fix and enable input filtering through include/filter.php

include/incl.php

@@ -82,6 +82,9 @@ if(isset($_REQUEST['mode']))
 /* End backwards compatibility code */
 
 
+// include filter.php to filter all REQUEST input
+require(BASE."include/filter.php");
+
 
 // create arrays
 $sidebar_func_list = array();
@@ -285,7 +288,11 @@ function dumpmsgbuffer()
 $session = new session("whq_appdb");
 $session->register("current");
 
-if(!isset($_SESSION['current'])) $_SESSION['current'] = new User();
+if(!isset($_SESSION['current']))
+{
+    echo "Session not set, creating new user";
+    $_SESSION['current'] = new User();
+}
 
 // if we are debugging we need to see all errors
 if($_SESSION['current']->showDebuggingInfos()) error_reporting(E_ALL ^ E_NOTICE);