Security: Added CMS_VERSION direct access guards to all action files<br />Security: Added allowed_classes restriction to all unserialize() calls<br />Security: Replaced deprecated ereg()/split() with preg_match()/explode()<br />Removed deprecated SetParameterType/CreateParameter/RestrictUnknownParams<br />Replaced deprecated CreateURL() with create_url()<br />Replaced deprecated cms_html_entity_decode() with html_entity_decode()<br />Replaced cge_utils::get_real_ip() with xt_utils::get_real_ip()<br />Replaced htmlspecialchars Smarty modifier with escape:'html'<br />Removed print_r() debug output in ratings action<br />Reduced nesting depth in admin_editcomment<br />Removed duplicate cookie-setting block<br />Standardised file headers, removed closing PHP tags<br />Fixed help template to not require CGExtensions tab plugins<br />Added doc/LICENSE file