diff --git a/install/lib/installer_base.lib.php b/install/lib/installer_base.lib.php
index a81e563fab405dd13a21ea17de82fd43cf183b17..a2e1f89360d55f9cc6220d10720f05a669f16c58 100644
--- a/install/lib/installer_base.lib.php
+++ b/install/lib/installer_base.lib.php
@@ -234,14 +234,12 @@ class installer_base {
 			die();
 		}
 
-		$unwanted_sql_plugins = array('validate_password');
-		$temp = '"'.implode('","', $unwanted_sql_plugins).'"';
-		$sql_plugins = $inst->db->queryAllRecords("SELECT plugin_name FROM information_schema.plugins WHERE plugin_status='ACTIVE' AND plugin_name IN ($temp)");
+		$unwanted_sql_plugins = array('validate_password');		
+		$sql_plugins = $inst->db->queryAllRecords("SELECT plugin_name FROM information_schema.plugins WHERE plugin_status='ACTIVE' AND plugin_name IN ?", $unwanted_sql_plugins);
 		if(is_array($sql_plugins) && !empty($sql_plugins)) {
 			foreach ($sql_plugins as $plugin) echo "Login in to MySQL and disable $plugin[plugin_name] with:\n\n    UNINSTALL PLUGIN $plugin[plugin_name];";
 			die();
 		}
-		unset($temp);
 
 		//** Create the database
 		if(!$this->db->query('CREATE DATABASE IF NOT EXISTS ?? DEFAULT CHARACTER SET ?', $conf['mysql']['database'], $conf['mysql']['charset'])) {
diff --git a/install/lib/update.lib.php b/install/lib/update.lib.php
index baba2000529d8874a43455cbed0ff3e6f8991aa0..6f29acefd3cb1a19df273ff208dace5e059328f2 100644
--- a/install/lib/update.lib.php
+++ b/install/lib/update.lib.php
@@ -133,13 +133,11 @@ function updateDbAndIni() {
 	}
 
 	$unwanted_sql_plugins = array('validate_password');
-	$temp = '"'.implode('","', $unwanted_sql_plugins).'"';
-	$sql_plugins = $inst->db->queryAllRecords("SELECT plugin_name FROM information_schema.plugins WHERE plugin_status='ACTIVE' AND plugin_name IN ($temp)");
+	$sql_plugins = $inst->db->queryAllRecords("SELECT plugin_name FROM information_schema.plugins WHERE plugin_status='ACTIVE' AND plugin_name IN ?", $unwanted_sql_plugins);
 	if(is_array($sql_plugins) && !empty($sql_plugins)) {
 		foreach ($sql_plugins as $plugin) echo "Login in to MySQL and disable $plugin[plugin_name] with:\n\n    UNINSTALL PLUGIN $plugin[plugin_name];";
 		die();
 	}
-	unset($temp);
 
 	//* Update $conf array with values from the server.ini that shall be preserved
 	$tmp = $inst->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . '.server', $conf['server_id']);