diff --git a/includes/provider.php b/includes/provider.php
index d804448d..4bafe8ee 100755
--- a/includes/provider.php
+++ b/includes/provider.php
@@ -50,7 +50,7 @@ function DisplayProviderConfig()
     if (!RASPI_MONITOR_ENABLED) {
         if (isset($_POST['SaveProviderSettings'])) {
             if (isset($_POST['country'])) {
-                $country = trim($_POST['country']);
+                $country = escapeshellarg(trim($_POST['country']));
                 if (strlen($country) == 0) {
                     $status->addMessage('Select a country from the server location list', 'danger');
                 } else {