Fix password change feature and strengthen command validation in pheditor.php
This update adds a secure password change mechanism (with confirmation and hashing) and improves session handling for authentication. It also hardens the command execution filter by blocking additional unsafe characters (including |, backticks, and newline sequences) to reduce the risk of command injection bypasses.
Acknowledgments:
Thanks to @sondt99 for contributions and improvements.