diff --git a/include/staff/ticket-edit.inc.php b/include/staff/ticket-edit.inc.php
index 2ce26ddb5ca59d70d8ebc3539280a64a113315fa..6294cda9205fda70173468c4fad871c8e8c3ce38 100644
--- a/include/staff/ticket-edit.inc.php
+++ b/include/staff/ticket-edit.inc.php
@@ -32,8 +32,8 @@ if ($_POST)
                     $.userLookup('ajax.php/tickets/<?php echo $ticket->getId(); ?>/change-user',
                             function(user) {
                                 $('input#user_id').val(user.id);
-                                $('#client-name').html(user.name);
-                                $('#client-email').html('&lt;'+user.email+'&gt;');
+                                $('#client-name').text(user.name);
+                                $('#client-email').text('<'+user.email+'>');
                     });
                     return false;
                 "><i class="icon-edit"></i> Change</a>
diff --git a/include/staff/ticket-open.inc.php b/include/staff/ticket-open.inc.php
index c4f6d2746a3b9e28fe6fed245f673c06cdf42bfc..a143ebb80fe42cf40fb984473e7fc42bfccc2cec 100644
--- a/include/staff/ticket-open.inc.php
+++ b/include/staff/ticket-open.inc.php
@@ -34,7 +34,7 @@ $info=Format::htmlchars(($errors && $_POST)?$_POST:$info);
                         $.userLookup('ajax.php/users/select/'+$('input#uid').val(),
                             function(user) {
                                 $('input#uid').val(user.id);
-                                $('#client-name').html(user.name);
+                                $('#client-name').text(user.name);
                                 $('#client-email').text('<'+user.email+'>');
                         });
                         return false;