diff --git a/app/admin/getUsers.php b/app/admin/getUsers.php
index e36577f..13508cd 100644
--- a/app/admin/getUsers.php
+++ b/app/admin/getUsers.php
@@ -56,6 +56,7 @@
 	}
 	$res = sql("select u.memberID, g.name from membership_users u left join membership_groups g on u.groupID=g.groupID left join  membership_grouppermissions p on g.groupID=p.groupID and p.tableName='{$table_name}' where {$where} order by g.name, u.memberID limit {$skip}, {$results_per_page}", $eo);
 	while($row = db_fetch_row($res)) {
+		$row = array_map('strip_tags', $row);
 		$prepared_data[] = array('id' => to_utf8($row[0]), 'text' => to_utf8("<b>{$row[1]}</b>/{$row[0]}"));
 	}
 
diff --git a/app/ajax_admin_tools.php b/app/ajax_admin_tools.php
index 7e1e3fd..e9de177 100644
--- a/app/ajax_admin_tools.php
+++ b/app/ajax_admin_tools.php
@@ -209,7 +209,7 @@ public function get_record_info() {
 			$rec_info['dateAdded'] = date($admin_config['PHPDateTimeFormat'], $rec_info['dateAdded']);
 			$rec_info['dateUpdated'] = date($admin_config['PHPDateTimeFormat'], $rec_info['dateUpdated']);
 
-			return @json_encode($rec_info);
+			return @json_encode(array_map('strip_tags', $rec_info));
 		}
 
 		/**