diff --git a/inc/baseclass.class.php b/inc/baseclass.class.php
index cee06b0e..cea02ea2 100644
--- a/inc/baseclass.class.php
+++ b/inc/baseclass.class.php
@@ -58,8 +58,10 @@ public function __construct($config = [])
         global $DB, $LANG;
 
         //force MySQL DATE_FORMAT in user locale
-        $query = "SET lc_time_names = '" . $_SESSION['glpilanguage'] . "'";
-        $DB->doQuery($query);
+        $query = "SET lc_time_names = ?";
+        $stmt = $DB->prepare($query);
+        $stmt->bind_param("s", $_SESSION['glpilanguage']);
+        $stmt->execute();
 
         if (empty($config)) {
             return;