diff --git a/php/cookies_and_access_control/addUser.php b/php/cookies_and_access_control/addUser.php
index bc91854..5fef9c3 100644
--- a/php/cookies_and_access_control/addUser.php
+++ b/php/cookies_and_access_control/addUser.php
@@ -2,10 +2,18 @@
      $userName = $_POST["uName"];
      $password = $_POST["myPassword"];
 
-     $pdo = new PDO('mysql:host=192.168.64.2;db=lab10', 'lab10', 'lab10');
+     $host = getenv('DB_HOST');
+     $db = getenv('DB_NAME');
+     $user = getenv('DB_USER');
+     $pass = getenv('DB_PASS');
 
-     $queryString = "INSERT INTO 'users' ('username', 'password') VALUES ('".$userName."','".$password."')";
+     $pdo = new PDO("mysql:host=$host;dbname=$db", $user, $pass);
+
+     $queryString = "INSERT INTO users (username, password) VALUES (:username, :password)";
 
      $result = $pdo->prepare($queryString);
-     $result->execute();
+     $result->execute([
+         ':username' => $userName,
+         ':password' => $password
+     ]);
 ?>
\ No newline at end of file
diff --git a/php/cookies_and_access_control/doLogin.php b/php/cookies_and_access_control/doLogin.php
index 658fb54..0233d39 100644
--- a/php/cookies_and_access_control/doLogin.php
+++ b/php/cookies_and_access_control/doLogin.php
@@ -28,11 +28,16 @@
      }
      */
 
-     $pdo = new PDO('mysql:host=192.168.64.2;db=lab10', 'lab10', 'lab10');
-     $queryString = "SELECT * FROM users WHERE username = '".$userName."'";
+     $host = getenv('DB_HOST');
+     $db = getenv('DB_NAME');
+     $user = getenv('DB_USER');
+     $pass = getenv('DB_PASS');
+
+     $pdo = new PDO("mysql:host=$host;dbname=$db", $user, $pass);
+     $queryString = "SELECT * FROM users WHERE username = :username";
 
      $result = $pdo->prepare($queryString);
-     $result->execute();
+     $result->execute([':username' => $userName]);
      $validUser = False;
 
      for ($i=0; $row = $result->fetch(); $i++) {