#38 update to previous bug

[kuba tyszko]

my patch seems to help a little but it's still possible
to view any file with html injection:

http://my.server.com/cwfm/View.php?view=E5homeE5kubaE5E4E4E5E4E4E5etcE5passwd&file=E4article

(i mean /home/kuba/../../etc/passwd ).

i'll also try to fix this soon.