diff --git a/resources/install/scripts/app/voicemail/resources/functions/record_message.lua b/resources/install/scripts/app/voicemail/resources/functions/record_message.lua
index 24cc28f8be..238c8db1ca 100644
--- a/resources/install/scripts/app/voicemail/resources/functions/record_message.lua
+++ b/resources/install/scripts/app/voicemail/resources/functions/record_message.lua
@@ -133,12 +133,13 @@
 							session:hangup();
 						else
 							--get the voicemail options
-								sql = [[SELECT * FROM v_voicemail_options WHERE voicemail_uuid = ']] .. voicemail_uuid ..[[' ORDER BY voicemail_option_order asc ]];
+								local sql = [[SELECT * FROM v_voicemail_options WHERE voicemail_uuid = :voicemail_uuid ORDER BY voicemail_option_order asc ]];
+								local params = {voicemail_uuid = voicemail_uuid};
 								if (debug["sql"]) then
-									freeswitch.consoleLog("notice", "[voicemail] SQL: " .. sql .. "\n");
+									freeswitch.consoleLog("notice", "[voicemail] SQL: " .. sql .. "; params:" .. json.encode(params) .. "\n");
 								end
 								count = 0;
-								status = dbh:query(sql, function(row)
+								dbh:query(sql, params, function(row)
 									--check for matching options
 										if (tonumber(row.voicemail_option_digits) ~= nil) then
 											row.voicemail_option_digits = "^"..row.voicemail_option_digits.."$";