diff --git a/include/param_pcmn.inc.php b/include/param_pcmn.inc.php
index 017d7f738..4380cfd42 100644
--- a/include/param_pcmn.inc.php
+++ b/include/param_pcmn.inc.php
@@ -124,7 +124,7 @@ if ( isset ( $_POST["Ajout"] ) ) {
 
 	  } else 
 	    {
-	      $Ret=ExecSql($cn,"insert into tmp_pcmn (pcm_val,pcm_lib,pcm_val_parent,pcm_type) values ('$p_val','$p_lib',$p_parent,'$p_type'));
+	      $Ret=ExecSqlParam($cn,"insert into tmp_pcmn (pcm_val,pcm_lib,pcm_val_parent,pcm_type) values ($1,$2,$3,$4)", array($p_val,$p_lib,$p_parent,$p_type));
 	    }
       }
     } else {