* Added password field to require users to enter password when requesting a change of e-mail address. * Removed reliance on HTTP_X_FORWARDED_FOR to prevent IP spoofing. * Moved up execution of unregister_globals() before the inclusion of config.php to prevent information disclosure vulnerability. * Fixed periods at the end of words not being filtered out before insertion into the search index. * Force quoted text to be from the topic we're posting in. * Implemented workaround for the IE GIF bug. See http://www.securiteam.com/windowsntfocus/6F00B00EBY.html