Additional fix for for http://bugs.cacert.org/view.php?id=1070

"Certain account passwords are logged in web server error log."

includes/general.php

@@ -219,7 +219,7 @@
 		//echo "Points due to name matches: $points<br/>";
 
 		$shellpwd = escapeshellarg($pwd);
-		$do = `grep $shellpwd /usr/share/dict/american-english`;
+		$do = `grep -F -- $shellpwd /usr/share/dict/american-english`;
 		if($do)
 			$points--;