cal_Calendar: bugFix Sql Injection