Call-time pass-by-reference, not need so removed.

#123487 by: Gertje
Fixed incorrent sql syntax in where clause

Need to:
1. Limit source ip's
2. Use proper defaults
3. Tidy up code
4. Check for XSS

Various space removals from string concatenation

Automatic creation of the image directory and visible clues if certain directories are not writable.