diff --git a/admin/communication.php b/admin/communication.php
index c6a3ddc..f097d45 100644
--- a/admin/communication.php
+++ b/admin/communication.php
@@ -605,7 +605,7 @@ case "email_get_list":
 		if($r->name) $name=$r->name;
 		else $name=i18n("no email name specified");
 
-		echo "<tr><td><a href=\"#\" onclick=\"return opencommunicationeditor('$r->val',$r->id,$fcid)\">$name</a></td>";
+		echo "<tr><td><a href=\"#\" onclick=\"return opencommunicationeditor('".addslashes($r->val)."',$r->id,$fcid)\">",htmlspecialchars($name)."</a></td>";
 		echo "<td>$r->type</td>";
 
 		echo " <td align=\"center\">";