diff --git a/libraries/Util.class.php b/libraries/Util.class.php
index b3885f06d3..0088c30bd2 100644
--- a/libraries/Util.class.php
+++ b/libraries/Util.class.php
@@ -2659,7 +2659,7 @@ class PMA_Util
             $dir .= '/';
         }
 
-        return str_replace('%u', $GLOBALS['cfg']['Server']['user'], $dir);
+        return str_replace('%u', PMA_securePath($GLOBALS['cfg']['Server']['user']), $dir);
     }
 
     /**