Fix: User id correction on holiday request

Fix : SEPA XML address should also have dolEscapeXML

Fix special char and size limit in SEPA XML

Fix #6504: CVE-2017-7886

FIX: Correction with author and validator user on orders

'defaultlang' attribute was not filtered before database request which cause an SQL injection.

FIX supplier order line creation with rang = 0

FIX : forgotten parameter for right multicompany use

Fix #5911 Added missing Slashes

fixed line where two slashes were missing, that caused an error when creating barcodes.