committed r173, including

filename checks: no one can get access above document root

is_raw checks: attachments and pages are mutually exclusive

only admin can write pages with perl code