diff --git a/htdocs/website/index.php b/htdocs/website/index.php
index 315492eefe6..b327549ac50 100644
--- a/htdocs/website/index.php
+++ b/htdocs/website/index.php
@@ -366,9 +366,9 @@ if (($action == 'replacesite' || $action == 'replacesiteconfirm') && ! $searchke
 }
 
 // Replacement of string into pages
-if ($massaction == 'replace')
+if ($massaction == 'replace' && GETPOST('confirmmassaction', 'alpha'))
 {
-	$replacestring = GETPOST('replacestring', 'alphanohtml');
+	$replacestring = GETPOST('replacestring', 'none');
 
 	if (empty($user->rights->website->writephp)) {
 		setEventMessages("NotAllowedToAddDynamicContent", null, 'errors');