ASP: off per default. CAPTCHA: removed unneeded $admin. Filename: just convert chars like quote, doublequote, < > & to empty string.
Text-captcha: moved text-file to database.
Added keywords to files where they are missing
added new CAPTCHA and ASP (Advanced Spam Protection)