diff --git a/code/modules/admin/player_notes_sql.dm b/code/modules/admin/player_notes_sql.dm
index b80d2b83..0eac3ee8 100644
--- a/code/modules/admin/player_notes_sql.dm
+++ b/code/modules/admin/player_notes_sql.dm
@@ -8,6 +8,8 @@
 	var/ckey = sanitizeSQL(key)
 	var/content = sanitizeSQL(note)
 
+	note = sql_sanitize_text(note)
+
 	var/a_ckey
 	if(usr)
 		a_ckey = sanitizeSQL(usr.key)
diff --git a/code/modules/admin/verbs/warning.dm b/code/modules/admin/verbs/warning.dm
index a9288213..d222bb5e 100644
--- a/code/modules/admin/verbs/warning.dm
+++ b/code/modules/admin/verbs/warning.dm
@@ -88,8 +88,12 @@
 	if(!reason)
 		return
 
+	reason = sql_sanitize_text(reason)
+
 	var/notes = input("Add Additional Information. This is visible to staff only.") as null|text
 
+	notes = sql_sanitize_text(notes)
+
 	var/severity
 	switch(alert("Set Warning Severity",,"Standard","Severe"))
 		if("Standard")