Hello Finn!
Please provide me your admin access of your UNA site and an example of your injection, which doesn't work. BTW - revert all changes in .haccess file, let's start from the beginning :-)
Thank you Leonid. I sent you a message