diff --git a/11/21.php b/11/21.php
index db637d4..3e6d166 100644
--- a/11/21.php
+++ b/11/21.php
@@ -12,7 +12,7 @@
 
   $user  = mysql_entities_fix_string($pdo, $_POST['user']);
   $pass  = mysql_entities_fix_string($pdo, $_POST['pass']);
-  $query = "SELECT * FROM users WHERE user='$user' AND pass='$pass'";
+  $query = "SELECT * FROM users WHERE user=$user AND pass=$pass";
 
   //Etc…