diff --git a/htdocs/mrp/tpl/linkedobjectblock.tpl.php b/htdocs/mrp/tpl/linkedobjectblock.tpl.php
index 31a0af8a10c..9374fc2e4d0 100644
--- a/htdocs/mrp/tpl/linkedobjectblock.tpl.php
+++ b/htdocs/mrp/tpl/linkedobjectblock.tpl.php
@@ -65,8 +65,8 @@ foreach ($TMoChilds as $key => $objectlink) {
echo '
';
// we want to make the link via element_element for delete action
- $sql = ' Select rowid from ' . MAIN_DB_PREFIX . 'element_element';
- $sql .= ' WHERE fk_source = '. (int) $object->id . ' and fk_target = "' . $key .'"';
+ $sql = " Select rowid from " . MAIN_DB_PREFIX . "element_element";
+ $sql .= " WHERE fk_source = ". (int) $object->id . " and fk_target = '" . dol_escape_htmltag($key) ."'";
$resql = $db->query($sql);
$k = 0;
|