diff --git a/backend/controllers/mediaController.ts b/backend/controllers/mediaController.ts
index 3ef28ac..14a63b7 100644
--- a/backend/controllers/mediaController.ts
+++ b/backend/controllers/mediaController.ts
@@ -190,7 +190,7 @@ function list(req: Request, res: Response) {
 
 async function create(req: Request, res: Response) {
   const mediaCode: string = req.body.code;
-  if (mediaCode.startsWith("t")) {
+  if (mediaCode.startsWith("tt")) {
     return await createMed(req, res);
   } else {
     return await createGame(req, res);
@@ -207,7 +207,6 @@ function remove(req: Request, res: Response) {
   const code = req.body.code;
 
   try {
-    const mediaTable = req.baseUrl.includes('movies') ? Table.movies : Table.series;
     const media = MediaModel.findOneAndDelete(mediaTable, code);
     if (!media) {
       return res.status(404).json({ message: 'No such media' });
diff --git a/backend/miscellaneous/db.ts b/backend/miscellaneous/db.ts
index e72afa0..3c79a63 100644
--- a/backend/miscellaneous/db.ts
+++ b/backend/miscellaneous/db.ts
@@ -55,12 +55,12 @@ function inset_keys() {
         return;
     }
    
-    pool.run(`
-        INSERT INTO userData (name, value) VALUES ("pass", "");
-        INSERT INTO userData (name, value) VALUES ("omdb_key", "");
-        INSERT INTO userData (name, value) VALUES ("twitch_client_id", "");
-        INSERT INTO userData (name, value) VALUES ("twitch_client_secret", "");
-    `);
+    const stmt = pool.prepare("INSERT INTO userData (name, value) VALUES (?, ?)");
+    stmt.run("pass", "");
+    stmt.run("omdb_key", "");
+    stmt.run("twitch_client_id", "");
+    stmt.run("twitch_client_secret", "");
+    stmt.finalize();
 }
 
 inset_keys();