Related to the first edit: Of course you are right that users normally come to these pages only via menu links, but anyway there are 1% "creative" users who may get there by entering urls directly or who are looking for ways to exploit or inject files etc. and then there are some 4% who apparently have some kind of talent to get to such "bugs" by themselves. So i've just mentioned it, cause I want to avoid that my users get to such issues...
For the second one: Actually the mod did ignore the "max concurrent setting" in both scenarios before I've rewritten these lines cause it seemed that the function was not executed - I don't know why as it was valid code. As I said, please correct me if I'm wrong