diff --git a/admin/communication.php b/admin/communication.php
index 1bdb5b97..42be3438 100644
--- a/admin/communication.php
+++ b/admin/communication.php
@@ -674,7 +674,7 @@ case "email_get_list":
 				'$emailqueueid',
 				'".mysql_real_escape_string($u['email'])."',
 				'".mysql_real_escape_string($u['name'])."',
-				'".json_encode($replacements)."',
+				'".mysql_real_escape_string(json_encode($replacements))."',
 				NULL)");
 			echo mysql_error();
 		}
@@ -832,7 +832,7 @@ case "email_get_list":
 					'$emailqueueid',
 					'".mysql_real_escape_string($toemail)."',
 					'".mysql_real_escape_string($toname)."',
-					'".json_encode($replacements)."',
+					'".mysql_real_escape_string(json_encode($replacements))."',
 					NULL)");
 				echo mysql_error();
 			}