diff --git a/html/inc/boinc_db.inc b/html/inc/boinc_db.inc
index bf2d1710c4..997ab73c08 100644
--- a/html/inc/boinc_db.inc
+++ b/html/inc/boinc_db.inc
@@ -311,6 +311,7 @@ class BoincResult {
}
static function lookup_name($name) {
$db = BoincDb::get();
+ $name = BoincDb::escape_string($name);
return $db->lookup('result', 'BoincResult', "name='$name'");
}
function delete() {