diff --git a/install-dev/upgrade/php/migrate_orders.php b/install-dev/upgrade/php/migrate_orders.php
index 5ea20c713..e635c6c0c 100644
--- a/install-dev/upgrade/php/migrate_orders.php
+++ b/install-dev/upgrade/php/migrate_orders.php
@@ -99,6 +99,8 @@ function migrate_orders()
 			foreach (array_keys($order_details) as $k)
 				if (!in_array($k, $col_order_detail))
 					unset($order_details[$k]);
+				else
+					$order_details[$k] = Db::getInstance()->escape($order_details[$k]);
 			$values_order_detail[] = '(\''.implode('\', \'', $order_details).'\')';
 		}