Close out previously identified bugs. #1046672: Wrong usage of ltrim #1153272: Not passing product model (SKU) in commission, shows useless order_product_id instead
Fix Cross Site Scripting (XSS) and Access Bypass vulnerabilities. Apply basic Drupal code formatting.