diff --git a/database.js b/database.js
index c32a021..ba2f905 100644
--- a/database.js
+++ b/database.js
@@ -110,11 +110,11 @@ export const saveLevel = (displayName, newLevel) => run(
 )
 
 export const setOnlineState = displayName => run(
-  `INSERT OR REPLACE INTO playerData (displayName, level, online) p1 VALUES (?, (SELECT level FROM playerData p2 WHERE p1.displayName = p2.displayName), 1)`,
-  [ displayName ]
+  `INSERT OR REPLACE INTO playerData (displayName, level, online) VALUES (?, (SELECT level FROM playerData p2 WHERE p1.displayName = ?), 1)`,
+  [ displayName, displayName ]
 )
 export const setOfflineState = displayName => run(
-  `INSERT OR REPLACE INTO playerData (displayName, level, online) p1 VALUES (?, (SELECT level FROM playerData p2 WHERE p1.displayName = p2.displayName), 0)`,
-  [ displayName ]
+  `INSERT OR REPLACE INTO playerData (displayName, level, online) VALUES (?, (SELECT level FROM playerData p2 WHERE p1.displayName = ?), 0)`,
+  [ displayName, displayName ]
 )
 export const getPlayersData = () => all('SELECT * FROM playerData ORDER BY online DESC, displayName ASC')