diff --git a/htdocs/variants/ajax/getCombinations.php b/htdocs/variants/ajax/getCombinations.php
index 8b7baaee27e..5c57191c3eb 100644
--- a/htdocs/variants/ajax/getCombinations.php
+++ b/htdocs/variants/ajax/getCombinations.php
@@ -28,7 +28,7 @@ require_once DOL_DOCUMENT_ROOT.'/variants/class/ProductCombination.class.php';
 
 header('Content-Type: application/json');
 
-$id = GETPOST('id');
+$id = GETPOST('id', 'int');
 
 if (!$id) {
 	print json_encode(array(
diff --git a/htdocs/variants/combinations.php b/htdocs/variants/combinations.php
index 0ec1bf07b68..ef7dffd9ed0 100644
--- a/htdocs/variants/combinations.php
+++ b/htdocs/variants/combinations.php
@@ -383,7 +383,7 @@ if (! empty($id) || ! empty($ref))
 
 					select.empty().append('<option value="">Loading...</option>');
 
-					jQuery.getJSON("<?php echo dol_buildpath('/variants/ajax/get_attribute_values.php', 2) ?>", {
+					jQuery.getJSON("ajax/get_attribute_values.php", {
 						id: jQuery(this).val()
 					}, function(data) {
 						if (data.error) {
@@ -699,8 +699,12 @@ if (! empty($id) || ! empty($ref))
 		print '</div>';
 		print '</form>';
 	}
+} else {
+	llxHeader();
+	// not found
 }
 
+
 llxFooter();
 
 $db->close();