Security: Prevent direct access to /vendor/ via .htaccess

Translation update (be)

comment out empty language string

Translation update (de)

The empty string is not translatable in the translation interface and
causes all languages to be <100%

This is an alternative approach to #2164

fix: prevent two selected options, b/c apparently 'String' == 0  

There was a bug, where the options array ['Auto', 0, 1] would result in
HTML option tags where both the 'Auto' and the 0 option were selected.

link the old version in MM when view it

This commit fixes a bug in the media manager when viewing an old version
of a media file. While, in case of an image, the old image would be
displayed in the third pane, the link above would still link to the
current version.

Fix section edit buttons for tables etc. 

Let `utf8_substr` use `utf8_strlen` 

Translation update (da)

Translation update (de-informal)

Add globbing to media manager search #2129

Make `utf8_strlen` use multiple fallback options

Remove insecure SSLv3 fallback, use TLS 1.2 if possible

STREAM_CRYPTO_METHOD_TLS_CLIENT is only TLS 1.0 except for PHP 5.6.0-5.6.6 and 7.2.0+.

Use constant type comparison for hashes

Translation update (fr)

closes #2129

Translation update (es)

Translation update (sr)

Translation update (uk)