diff --git a/lib/datalib.php b/lib/datalib.php
index 5614f0a9f3c..f882c5818fd 100644
--- a/lib/datalib.php
+++ b/lib/datalib.php
@@ -1748,7 +1748,7 @@ function instance_is_visible($moduletype, $module) {
                                               WHERE cm.course = :courseid AND
                                                     cm.module = m.id AND
                                                     m.name = :moduletype AND
-                                                    cm.instance = :moduleid")) {
+                                                    cm.instance = :moduleid", $params)) {
 
             foreach ($records as $record) { // there should only be one - use the first one
                 return $record->visible;