install:: security issue fixed. Now save.php only can be called from form inside index.php
=== create main branch ===