diff --git a/DEBIAN/conffiles b/DEBIAN/conffiles
new file mode 100644
index 00000000..9f5d6cc7
--- /dev/null
+++ b/DEBIAN/conffiles
@@ -0,0 +1 @@
+/etc/hedera-web/config.php
diff --git a/DEBIAN/control b/DEBIAN/control
index 55ed5b28..858115d2 100644
--- a/DEBIAN/control
+++ b/DEBIAN/control
@@ -1,8 +1,8 @@
 Package: hedera-web
-Version: 1.0-1
+Version: 1.0-3
 Architecture: all
 Maintainer: Juan Ferrer Toribio <juan@verdnatura.es>
-Depends: php5-mysql, php5-imap
+Depends: apache2, php5-mysql
 Section: misc
 Priority: optional
 Description: Verdnatura's web page
diff --git a/DEBIAN/postinst b/DEBIAN/postinst
new file mode 100755
index 00000000..b9cb5d2f
--- /dev/null
+++ b/DEBIAN/postinst
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+service apache2 reload
+
diff --git a/DEBIAN/prerm b/DEBIAN/prerm
new file mode 100755
index 00000000..b9cb5d2f
--- /dev/null
+++ b/DEBIAN/prerm
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+service apache2 reload
+
diff --git a/usr/share/hedera-web/config.php b/etc/hedera-web/config.php
similarity index 100%
rename from usr/share/hedera-web/config.php
rename to etc/hedera-web/config.php
diff --git a/usr/share/hedera-web/ajax.php b/usr/share/hedera-web/ajax.php
index e2080701..28cea121 100755
--- a/usr/share/hedera-web/ajax.php
+++ b/usr/share/hedera-web/ajax.php
@@ -33,7 +33,7 @@ if (Hedera::login ())
 	if (isset ($_REQUEST['action']))
 		$action = $_REQUEST['action'];
 
-	if ($action)
+	if ($action && checkToken ($action))
 	{
 		$actionFile = 'ajax/'. $action .'.php';
 
diff --git a/usr/share/hedera-web/index.php b/usr/share/hedera-web/index.php
index 44a54e90..cee2a3b7 100755
--- a/usr/share/hedera-web/index.php
+++ b/usr/share/hedera-web/index.php
@@ -19,7 +19,7 @@ if (!Hedera::$sysConn->isOpen ())
 
 // Getting the section
 
-if (isset ($_GET['section']))
+if (isset ($_GET['section']) && checkToken ($_GET['section']))
 	$section = $_GET['section'];
 else
 	$section = 'login';
diff --git a/usr/share/hedera-web/module.php b/usr/share/hedera-web/module.php
index 5c60a146..b4174000 100755
--- a/usr/share/hedera-web/module.php
+++ b/usr/share/hedera-web/module.php
@@ -5,7 +5,7 @@ require_once ('php/web/hedera.php');
 Hedera::init ();
 Hedera::login ();
 
-if (isset ($_GET['module']))
+if (isset ($_GET['module']) && checkToken ($_GET['module']))
 	$module = $_GET['module'];
 else
 	$module = $conf['defaultModule'];
diff --git a/usr/share/hedera-web/php/vn/vn.php b/usr/share/hedera-web/php/vn/vn.php
index 729386b7..319fbbd6 100755
--- a/usr/share/hedera-web/php/vn/vn.php
+++ b/usr/share/hedera-web/php/vn/vn.php
@@ -1,6 +1,5 @@
 <?php
 
-require_once ('config.php');
 require_once ('php/vn/type.php');
 require_once ('php/vn/locale.php');
 require_once ('php/vn/error.php');
diff --git a/usr/share/hedera-web/php/web/hedera.php b/usr/share/hedera-web/php/web/hedera.php
index b5ac0a18..7a5df96b 100755
--- a/usr/share/hedera-web/php/web/hedera.php
+++ b/usr/share/hedera-web/php/web/hedera.php
@@ -1,8 +1,20 @@
 <?php
 
+$homeConf = $_SERVER['CONTEXT_DOCUMENT_ROOT'].'/../.config/hedera-web/config.php';
+
+if (file_exists ($homeConf))
+	require_once ($homeConf);
+else
+	require_once ('/etc/hedera-web/config.php');
+
 require_once ('php/db/db.php');
 require_once ('php/web/auth.php');
 
+function checkToken ($token)
+{
+	return preg_match ('/^[\w\-]+$/', $token);
+}
+
 function ifNull ($map, $key)
 {
 	return isset ($map[$key]) ? $map[$key] : NULL;