diff --git a/vuln_apps/orderdata.php b/vuln_apps/orderdata.php
index 39dfa32..427359f 100644
--- a/vuln_apps/orderdata.php
+++ b/vuln_apps/orderdata.php
@@ -15,7 +15,7 @@
        	$db = $conn->shop;
 		 	$collection = $db->orders;
 		 	$search = $_GET['ordersearch'];
-		 	$js = "function () { var query = '". $ordersearch . "'; return this.id == query;}";
+		 	$js = "function () { var query = '". $search . "'; return this.id == query;}";
 		 	//print $js;
 		 	print '<br/>';
        
@@ -48,4 +48,4 @@
 <?php echo $result; ?>
 </div>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/vuln_apps/userdata.php b/vuln_apps/userdata.php
index 303fbef..0fc8165 100644
--- a/vuln_apps/userdata.php
+++ b/vuln_apps/userdata.php
@@ -11,7 +11,7 @@
 	if (isset($_GET['usersearch']) && !empty($_GET['usersearch'])) {
 		try {
       	$result = "";
-       	$conn = new MongoClient('mongodb://192.168.87.157');
+       	$conn = new MongoClient('mongodb://127.0.0.1');
        	$db = $conn->appUserData;
 		 	$collection = $db->users;
 		 	$search = $_GET['usersearch'];
@@ -47,4 +47,4 @@
 <?php echo $result; ?>
 </div>
 </body>
-</html>
\ No newline at end of file
+</html>