Security Patch

Hey,

I understand the reasoning behind the extra 'feature', but unless people know about it and fully understand the implications, then I'm classing this as a critical bug report :P .

This patch adds a few lines to

Which checks if there is an active project, and if the user is able to view the project.

Once / if we get Mike's idea implemented we can change this, but for the mean time this is the best fix imo.

Alex