Bug in 0.4.0 and previous

Thanks to Kamil 'K3' Sienicki for reporting this via e-mail. The possible exploit is describe on this URL: http://k3.int.pl/security/openfaq.txt

A previous annoncement has been made about other errors, but no new release came as promised. I will probably rewrite the whole thing using PHP5 and the filebase SQLite database interface.