diff --git a/htdocs/compta/bank/account.php b/htdocs/compta/bank/account.php
index 93827dc894c2b44df5c9ef4364c2cbd4daf5d93d..74ff851d7a5c5ab9f2bb7457b7d1085d5d5ec47b 100644
--- a/htdocs/compta/bank/account.php
+++ b/htdocs/compta/bank/account.php
@@ -184,25 +184,25 @@ if ($account || $_GET["ref"])
 	$mode_search = 0;
 	if ($_REQUEST["req_desc"])
 	{
-		$sql_rech.= " AND b.label like '%".$_REQUEST["req_desc"]."%'";
+		$sql_rech.= " AND b.label like '%".addslashes($_REQUEST["req_desc"])."%'";
 		$param.='&req_desc='.urlencode($_REQUEST["req_desc"]);
 		$mode_search = 1;
 	}
 	if ($_REQUEST["req_debit"])
 	{
-		$sql_rech.=" AND b.amount = -".$_REQUEST["req_debit"];
+		$sql_rech.=" AND b.amount = -".price2num($_REQUEST["req_debit"]);
 		$param.='&req_debit='.urlencode($_REQUEST["req_debit"]);
 		$mode_search = 1;
 	}
 	if ($_REQUEST["req_credit"])
 	{
-		$sql_rech.=" AND b.amount = ".$_REQUEST["req_credit"];
+		$sql_rech.=" AND b.amount = ".price2num($_REQUEST["req_credit"]);
 		$param.='&req_credit='.urlencode($_REQUEST["req_credit"]);
 		$mode_search = 1;
 	}
 	if ($_REQUEST["thirdparty"])
 	{
-		$sql_rech.=" AND (IFNULL(s.nom,'') LIKE '%".$_REQUEST["thirdparty"]."%')";
+		$sql_rech.=" AND (IFNULL(s.nom,'') LIKE '%".addslashes($_REQUEST["thirdparty"])."%')";
 		$param.='&thirdparty='.urlencode($_REQUEST["thirdparty"]);
 		$mode_search = 1;
 	}