diff --git a/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php b/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
index 2c9997a..d0fea77 100644
--- a/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
+++ b/src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
@@ -94,10 +94,12 @@ if(isset($_GET["add_todolist"])){
 							
 							
 							$sql_lists = "SELECT id, name FROM todo_lists WHERE belongs_to_incident = ?";
+							$stmt = $conn->prepare($sql_lists);
 							$incident_id=htmlspecialchars($_GET["incident_id"]);
 							$stmt->bind_param("i", $incident_id);
 							$incident_id=htmlspecialchars($_GET["incident_id"]);
-							$result_lists = $conn->query($sql_lists);
+							$stmt->execute();
+							$result_lists = $stmt->get_result();
 
 							if ($result_lists->num_rows > 0) {
 								// Output data of each to-do list