diff --git a/apps/files/lib/activity.php b/apps/files/lib/activity.php
index d473120b31fc946ad13c39187c93f4f2b0ab2b48..c171b3bfabf160ba2bc612920e1b7f28255efcaa 100644
--- a/apps/files/lib/activity.php
+++ b/apps/files/lib/activity.php
@@ -391,7 +391,7 @@ class Activity implements IExtension {
 			}
 			foreach ($favorites['folders'] as $favorite) {
 				$fileQueryList[] = '`file` LIKE ?';
-				$parameters[] = $favorite . '/%';
+				$parameters[] = \OC::$server->getDatabaseConnection()->escapeLikeParameter($favorite) . '/%';
 			}
 
 			return [