diff --git a/cis/index.php b/cis/index.php
index 903e4b26e..8aecfc60e 100644
--- a/cis/index.php
+++ b/cis/index.php
@@ -36,7 +36,11 @@ if(isset($_GET['sprache']))
die('Sprache invalid');
}
if(isset($_GET['content_id']))
+{
$id = $_GET['content_id'];
+ if(!is_numeric($id))
+ $id='';
+}
else
$id = '';
@@ -52,6 +56,7 @@ else
$sprache = getSprache();
$p = new phrasen($sprache);
+$db = new basis_db();
?>
@@ -74,7 +79,7 @@ function changeSprache(sprache)
menu = escape(menu);
content = escape(content);
- window.location.href="index.php?sprache="+sprache+"&content_id=&menu="+menu+"&content="+content;
+ window.location.href="index.php?sprache="+sprache+"&content_id=convert_html_chars($id);?>&menu="+menu+"&content="+content;
}
function gettimestamp()
{
@@ -135,10 +140,10 @@ function loadampel()
-
-