PHP5.3 compatibility

There are a few places where syntax has to be modified to remove PHP5.3 warnings about passing a value instead of a reference.

With this done, however, the report is empty. What is happening is that the loop building $rows in theme_hacked_report() relies on $project['project_type'] which is always empty.

A naughty quick hack adding a constant value of "module", like

if (empty($project['project_type'])) {
  $project['project_type'] = 'module';
}

enables the table to build and display the packages, but this is clearly incorrect and not sufficient: all packages are then flagged as "unchecked", including core, bringing no value over the normal update_status display.