diff --git a/app/destinations/destinations.php b/app/destinations/destinations.php
index 673d4f1da..af706df98 100644
--- a/app/destinations/destinations.php
+++ b/app/destinations/destinations.php
@@ -304,7 +304,7 @@
 	echo "		<td width='33.3%' align='center' nowrap='nowrap'>$paging_controls</td>\n";
 	echo "		<td class='list_control_icons'>";
 	if (permission_exists('destination_add')) {
-		echo 		"<a href='destination_edit.php?type=$destination_type' alt='".$text['button-add']."'>$v_link_label_add</a>";
+		echo 		"<a href='destination_edit.php?type=".escape($destination_type)."' alt='".$text['button-add']."'>$v_link_label_add</a>";
 	}
 	else {
 		echo 		"&nbsp;";