substitution hooks

Merge #5464 Fix: Prevent SQLiFix into 4.0

FIX Filter on categories should depends on context

Fix: Prevent SQLi

Conflicts:
	htdocs/core/class/html.form.class.php
	htdocs/fourn/class/fournisseur.commande.class.php
	htdocs/install/repair.php

FIX dasboard wrong for late invoice

FIX #5470 User of expense report in bank transactions page is not correct

to keep it if required.