second parameter to rhl7DecodeData is declared a reference, so removing call time declaration
SQL Injection Fix for language id routines in library/translation.inc.php.  Removes potential pre-authorization exploit