diff --git a/account/login/login.php b/account/login/login.php
index 7e62959..a417031 100644
--- a/account/login/login.php
+++ b/account/login/login.php
@@ -18,7 +18,7 @@ une fois bien connecté, on redirige vers /account/profile
 $hashedPassword = sha1($password);
 $resultat = mysqli_query($db, "SELECT *
                                FROM user 
-                               WHERE mail = $email AND password = $hashedPassword");
+                               WHERE mail = '$email' AND password = '$hashedPassword'");
 
 $query = "SELECT mail, password              
                   FROM user