diff --git a/hdrl/src/org/labkey/hdrl/query/InboundRequestUpdateService.java b/hdrl/src/org/labkey/hdrl/query/InboundRequestUpdateService.java
index d63115b5..a8085053 100644
--- a/hdrl/src/org/labkey/hdrl/query/InboundRequestUpdateService.java
+++ b/hdrl/src/org/labkey/hdrl/query/InboundRequestUpdateService.java
@@ -148,7 +148,7 @@ public static void validateUniqueness(Integer requestId) throws QueryUpdateServi
     private static List<String> findDuplicates(Integer requestId, String fields)
     {
         SQLFragment sql = new SQLFragment("SELECT ")
-                .append(fields).append(" FROM hdrl.inboundspecimen WHERE inboundrequestid = ").append(requestId);
+                .append(fields).append(" FROM hdrl.inboundspecimen WHERE inboundrequestid = ?").add(requestId);
         for (String field : fields.split(", "))
         {
             sql.append(" AND ").append(field).append(" IS NOT NULL ");