diff --git a/libraries/display_export.lib.php b/libraries/display_export.lib.php
index 172615785..62641f33b 100644
--- a/libraries/display_export.lib.php
+++ b/libraries/display_export.lib.php
@@ -86,9 +86,9 @@ if(isset($_GET['sql_query'])) {
         if($export_type == 'server') {
             echo __('Exporting databases in the current server');
         } elseif($export_type == 'database') {
-            echo __('Exporting tables in the database "' . $db . '"');
+            printf(__('Exporting tables in the database "%s"'), htmlspecialchars($db));
         } else {
-            echo __('Exporting rows in the table "' . $table . '"');
+            printf(__('Exporting rows in the table "%s"'), htmlspecialchars($table));
         }?>
     </h2>
 </div>
diff --git a/libraries/display_import.lib.php b/libraries/display_import.lib.php
index daa97c3c5..d83244eb4 100644
--- a/libraries/display_import.lib.php
+++ b/libraries/display_import.lib.php
@@ -128,9 +128,9 @@ if ($_SESSION[$SESSION_KEY]["handler"]!="noplugin") {
             if($import_type == 'server') {
                 echo __('Importing into the current server');
             } elseif($import_type == 'database') {
-                echo __('Importing into the database "' . $db . '"');
+                printf(__('Importing into the database "%s"'), htmlspecialchars($db));
             } else {
-                echo __('Importing into the table "' . $table . '"');
+                printf(__('Importing into the table "%s"'), htmlspecialchars($table));
             }?>
         </h2>
     </div>