diff --git a/app/registrations/registration_reload.php b/app/registrations/registration_reload.php
index 7b1443c6e4..0ec1c01ec6 100644
--- a/app/registrations/registration_reload.php
+++ b/app/registrations/registration_reload.php
@@ -86,11 +86,11 @@
 	}
 
 	var requestTime = function() {
-		var url = 'registrations.php?template=false&profile=&show=<?php echo $show; ?>';
+		var url = 'registrations.php?template=false&profile=&show=<?php echo escape($show); ?>';
 		new loadXmlHttp(url, 'ajax_response');
 		<?php
 		if (strlen($_SESSION["ajax_refresh_rate"]) == 0) { $_SESSION["ajax_refresh_rate"] = "1800"; }
-		echo "setInterval(function(){new loadXmlHttp(url, 'ajax_reponse');}, ".$_SESSION["ajax_refresh_rate"].");";
+		echo "setInterval(function(){new loadXmlHttp(url, 'ajax_reponse');}, ".escape($_SESSION["ajax_refresh_rate"]).");";
 		?>
 	}