diff --git a/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php b/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
index cce66b6..339c5fc 100644
--- a/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
+++ b/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
@@ -32,6 +32,7 @@ if(isset($_GET["add_todolist"])){
 	$name=htmlspecialchars($_POST["name"]);
 	$incident_id=htmlspecialchars($_GET["incident_id"]);
 	$sql="INSERT INTO todo_lists (name,belongs_to_incident) VALUES(?,?)";
+	$stmt = $conn->prepare($sql);
 	$stmt->bind_param("si", $name,$incident_id);
 	$name=htmlspecialchars($_POST["name"]);
 	$incident_id=htmlspecialchars($_GET["incident_id"]);