diff --git a/back/src/controllers/administrateur.controller.js b/back/src/controllers/administrateur.controller.js
index b825717983b3c92219c1b7e22978537dc04388d9..3d118e87125f4ea8abf9bf86ebbb981257efe441 100644
--- a/back/src/controllers/administrateur.controller.js
+++ b/back/src/controllers/administrateur.controller.js
@@ -1,6 +1,5 @@
 const mysql = require('mysql');
 const fetch = require('node-fetch');
-const sql = require('../tools/sql.js')
 var secrets = require('../secrets.js');
 var dbhost = secrets.dbhost;
 var dbuser = secrets.dbuser;
@@ -45,9 +44,10 @@ function addNewAdministrateur(req, res) {
 
 function updateAdministrateur(req, res) {
   var con = mysql.createConnection(dbConfig);
-  var query = "UPDATE Admin SET login = '" + req.body.login + "' WHERE id=" + req.body.id + ";"
+  var query = "UPDATE Admin SET login = ? WHERE id=?;"
+  var inserts = [req.body.login, req.body.id];
   con.connect();
-  con.query(query, (err, result) => {
+  con.query(query, inserts, (err, result) => {
     if (err) {
       console.log(err)
       return res.send({ success: false })
diff --git a/back/src/tools/sql.js b/back/src/tools/sql.js
deleted file mode 100644
index dc341d813b568b93e7ef0ad41f8120558ede5365..0000000000000000000000000000000000000000
--- a/back/src/tools/sql.js
+++ /dev/null
@@ -1,9 +0,0 @@
-exports.preparer = function (mysql, requete_sql, inserts) {
-    requete_sql = mysql.format(requete_sql, inserts)
-        // nous utilisons la méthode .remplace avec une expression régulière
-        // pour supprimer les accents graves et les points
-        .replace(/`/g, "'")
-        .replace(/'\.'/g, ".")
-        .replace(/'/g, "\\'");
-    return requete_sql;
-}
\ No newline at end of file