diff --git a/libraries/classes/Server/Privileges.php b/libraries/classes/Server/Privileges.php
index 7b4a8137d8..05ae59510b 100644
--- a/libraries/classes/Server/Privileges.php
+++ b/libraries/classes/Server/Privileges.php
@@ -3121,7 +3121,7 @@ class Privileges
                 )
             )
             . '">'
-            . htmlspecialchars($dbname) . ': '
+            . htmlspecialchars(Util::unescapeMysqlWildcards($dbname)) . ': '
             . Util::getTitleForTarget(
                 $GLOBALS['cfg']['DefaultTabDatabase']
             )
@@ -4743,7 +4743,7 @@ class Privileges
      *
      * @return string $html_output
      */
-    public static function getHtmlForUserProperties($dbname_is_wildcard,$url_dbname,
+    public static function getHtmlForUserProperties($dbname_is_wildcard, $url_dbname,
         $username, $hostname, $dbname, $tablename
     ) {
         $html_output  = '<div id="edit_user_dialog">';
diff --git a/server_privileges.php b/server_privileges.php
index 23022a72b5..6270ab0002 100644
--- a/server_privileges.php
+++ b/server_privileges.php
@@ -422,7 +422,7 @@ if (isset($_REQUEST['adduser'])) {
             str_replace(
                 array('\_', '\%'),
                 array('_', '%'),
-                $_REQUEST['dbname']
+                $dbname
             )
         );
     }