diff --git a/main/newscorm/aicc_api.php b/main/newscorm/aicc_api.php
index 3887422895..e158289506 100644
--- a/main/newscorm/aicc_api.php
+++ b/main/newscorm/aicc_api.php
@@ -150,7 +150,7 @@ function LMSGetValue(param) {
 		result='<?php echo $_user['user_id']; ?>';
 	}else if(param == 'cmi.core.student_name'){
 		  <?php
-			$who=$_user['lastName'].", ".$_user['firstName'];
+			$who=addslashes($_user['lastName'].", ".$_user['firstName']);
 		    echo "result='$who';"; 
 		  ?>
 	}else if(param == 'cmi.core.lesson_location'){
@@ -206,7 +206,7 @@ function LMSGetValue(param) {
 			break;
 		case 'cmi.core.student_name'	: 
 		  <?php
-			$who=$_user['firstName'].",".$_user['lastName'];
+			$who=addslashes($_user['firstName'].",".$_user['lastName']);
 		    echo "result='$who';"; 
 		  ?>	break;
 		case 'cmi.core.lesson_location'	:
diff --git a/main/newscorm/scorm_api.php b/main/newscorm/scorm_api.php
index c6b77b2318..b640c1d78c 100644
--- a/main/newscorm/scorm_api.php
+++ b/main/newscorm/scorm_api.php
@@ -222,7 +222,7 @@ function LMSGetValue(param) {
 		result='<?php echo $_user['user_id']; ?>';
 	}else if(param == 'cmi.core.student_name'){
 		  <?php
-			$who=$_user['lastName'].", ".$_user['firstName'];
+			$who=addslashes($_user['lastName'].", ".$_user['firstName']);
 		    echo "result='$who';"; 
 		  ?>
 	}else if(param == 'cmi.core.lesson_location'){
@@ -287,7 +287,7 @@ function LMSGetValue(param) {
 			break;
 		case 'cmi.core.student_name'	: 
 		  <?php
-			$who=$_user['firstName'].",".$_user['lastName'];
+			$who=addslashes($_user['firstName'].",".$_user['lastName']);
 		    echo "result='$who';"; 
 		  ?>	break;
 		case 'cmi.core.lesson_location'	: