From 2d0b2542c9af24a9ec4dd05010bc554010151e61 Mon Sep 17 00:00:00 2001
From: Jan-Philipp Litza <janphilipp@litza.de>
Date: Sat, 29 Dec 2012 14:41:09 +0100
Subject: a few fixes and polishes in myshifts, shifts and menu

---
 includes/sys_menu.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'includes/sys_menu.php')

diff --git a/includes/sys_menu.php b/includes/sys_menu.php
index 2ddc9b10..7eeaa70a 100644
--- a/includes/sys_menu.php
+++ b/includes/sys_menu.php
@@ -121,8 +121,8 @@ function make_langselect() {
 	else
 		$URL = $_SERVER["REQUEST_URI"] . "?SetLanguage=";
 
-	$html = '<p class="content"><a class="sprache" href="' . $URL . 'DE"><img src="pic/flag/de.png" alt="DE" title="Deutsch"></a>';
-	$html .= '<a class="sprache" href="' . $URL . 'EN"><img src="pic/flag/en.png" alt="EN" title="English"></a></p>';
+	$html = '<p class="content"><a class="sprache" href="' . htmlspecialchars($URL) . 'DE"><img src="pic/flag/de.png" alt="DE" title="Deutsch"></a>';
+	$html .= '<a class="sprache" href="' . htmlspecialchars($URL) . 'EN"><img src="pic/flag/en.png" alt="EN" title="English"></a></p>';
 	return '<nav class="container"><h4>' . Get_Text("Sprache") . '</h4>' . $html . '</nav>';
 }
 ?>
-- 
cgit v1.2.3-54-g00ecf