Several more fixes and Security update:
- added cross-site scripting (XSS) shield
- fixed: default charset sometimes not worked correctly
- fixed: Export broken if table names contain underscore
- fixed: Export CSV in utf8 now done with bom-mark
- fixed: added date_default_timezone_set
- added cacheing database list in session
- fixed: small fixes in export