diff --git a/global_search.php b/global_search.php
index 568c02c3..1d4f2e77 100644
--- a/global_search.php
+++ b/global_search.php
@@ -11,6 +11,7 @@ if(isset($_GET['query'])){
$sql_products = mysqli_query($mysqli,"SELECT * FROM products WHERE product_name LIKE '%$query%' AND company_id = $session_company_id ORDER BY product_id DESC LIMIT 5");
$sql_logins = mysqli_query($mysqli,"SELECT * FROM logins WHERE login_name LIKE '%$query%' AND company_id = $session_company_id ORDER BY login_id DESC LIMIT 5");
+ $q = htmlentities($_GET['query']);
?>