diff --git a/html/includes/api_functions.inc.php b/html/includes/api_functions.inc.php
index 40c64a9bca..a3131c5472 100644
--- a/html/includes/api_functions.inc.php
+++ b/html/includes/api_functions.inc.php
@@ -1302,7 +1302,7 @@ function list_ipsec() {
         $message = "No valid hostname or device ID provided";
     }
     else {
-        $ipsec  = dbFetchRows("SELECT `D`.`hostname`, `I`.* FROM `ipsec_tunnels` AS `I`, `devices` AS `D` WHERE `I`.`device_id`=? `D`.`device_id` = `I`.`device_id`", array($device_id));
+        $ipsec  = dbFetchRows("SELECT `D`.`hostname`, `I`.* FROM `ipsec_tunnels` AS `I`, `devices` AS `D` WHERE `I`.`device_id`=? AND `D`.`device_id` = `I`.`device_id`", array($device_id));
         $total  = count($ipsec);
         $status = 'ok';
         $code   = 200;