diff --git a/app/sip_status/sip_status.php b/app/sip_status/sip_status.php
index abb921be11..1ad33c4e78 100644
--- a/app/sip_status/sip_status.php
+++ b/app/sip_status/sip_status.php
@@ -108,7 +108,7 @@ if ($_GET['a'] == "download") {
 	$sql = "select sip_profile_name from v_sip_profiles ";
 	$sql .= "where sip_profile_enabled = 'true' ";
 	if ($hostname) {
-		$sql .= "and (sip_profile_hostname = '" . $hostname . "' ";
+		$sql .= "and (sip_profile_hostname = '" . check_str($hostname) . "' ";
 		$sql .= "or sip_profile_hostname = '' ";
 		$sql .= "or sip_profile_hostname is null ) ";
 	}