diff --git a/admin/translations.php b/admin/translations.php
index 5ed2d136..3c3925e3 100644
--- a/admin/translations.php
+++ b/admin/translations.php
@@ -117,7 +117,7 @@ while($r=mysql_fetch_object($q))
 	echo "<td rowspan=\"2\" valign=\"middle\" ><input type=\"submit\" value=\"".i18n("Save")."\" /></td>";
 	echo "</tr>";
 	echo "<tr>";
-	echo "<td valign=\"top\"><input style=\"width: 95%\" type=\"text\" name=\"val\" value=\"$r->val\" /></td>";
+	echo "<td valign=\"top\"><input style=\"width: 95%\" type=\"text\" name=\"val\" value=\"".htmlspecialchars($r->val)."\" /></td>";
 	echo "</tr>";
 	echo "<tr><td colspan=\"2\"><hr /></td></tr>";
 	echo "</form>\n";