diff --git a/upload/source/include/misc/misc_security.php b/upload/source/include/misc/misc_security.php
index 6c0b15ff9186e718689a595e82d6751fb7583d78..68c6d752c196876ab5d9b20bfd9fb7dc98baca5b 100644
--- a/upload/source/include/misc/misc_security.php
+++ b/upload/source/include/misc/misc_security.php
@@ -87,6 +87,8 @@ function securitymessage($subject, $message, $reload = TRUE, $form = FALSE) {
 		echo '<div id="attackevasive_1" class="popupmenu_option"><b style="font-size: 16px">'.$subject.'</b><br /><br />'.$message.'</div>';
 		security_ajaxshowfooter();
 	} else {
+		$charset = getglobal('config/output/charset');
+		@header('Content-Type: text/html; charset='.$charset);
 		echo '<html>';
 		echo '<head>';
 		echo '<title>'.$subject.'</title>';
@@ -134,7 +136,7 @@ function security_ajaxshowheader() {
 	@header("Expires: -1");
 	@header("Cache-Control: no-store, private, post-check=0, pre-check=0, max-age=0", FALSE);
 	@header("Pragma: no-cache");
-	header("Content-type: application/xml");
+	@header("Content-type: application/xml; charset=".$charset);
 	echo "<?xml version=\"1.0\" encoding=\"".$charset."\"?>\n<root><![CDATA[";
 }
 
