diff --git a/admin/schoolsimport.php b/admin/schoolsimport.php
index 918d4c56..c1326660 100644
--- a/admin/schoolsimport.php
+++ b/admin/schoolsimport.php
@@ -86,30 +86,29 @@ if (get_value_from_array($_POST, 'action') == 'import') {
 					$principal['phonework'] = $row[13];
 					user_save($principal);
 				}
+
 				$stmt = $pdo->prepare("INSERT INTO schools (school,schoollang,schoollevel,board,district,phone,fax,address,city,province_code,postalcode,schoolemail,accesscode,registration_password,projectlimit,projectlimitper,year,principal_uid,sciencehead_uid) VALUES (
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?,
-						?)");
-				$stmt->execute([stripslashes($row[0]),stripslashes($row[1],stripslashes($row[2]),stripslashes($row[3])),
-				stripslashes($row[4]),stripslashes($row[5]),stripslashes($row[6]),stripslashes($row[7]),stripslashes($row[8]),
-				stripslashes($row[9]),stripslashes($row[10]),stripslashes($row[14]),stripslashes($row[18]),stripslashes($row[19]),
-				stripslashes($row[20]),stripslashes($row[21]),$config['FAIRYEAR'],$principal['uid'],$scienceHead['uid']]);
+					'" . stripslashes($row[0]) . "',
+					'" . stripslashes($row[1]) . "',
+					'" . stripslashes($row[2]) . "',
+					'" . stripslashes($row[3]) . "',
+					'" . stripslashes($row[4]) . "',
+					'" . stripslashes($row[5]) . "',
+					'" . stripslashes($row[6]) . "',
+					'" . stripslashes($row[7]) . "',
+					'" . stripslashes($row[8]) . "',
+					'" . stripslashes($row[9]) . "',
+					'" . stripslashes($row[10]) . "',
+					'" . stripslashes($row[14]) . "',
+					'" . stripslashes($row[18]) . "',
+					'" . stripslashes($row[19]) . "',
+					'" . stripslashes($row[20]) . "',
+					'" . stripslashes($row[21]) . "',
+					'" . $config['FAIRYEAR'] . "',
+					'" . $principal['uid'] . "',
+					'" . $scienceHead['uid'] . "')");
+				$stmt->execute();
+
 				if (!$pdo->errorInfo())
 					$loaded++;
 				else