diff --git a/packages/server/lib/operator.js b/packages/server/lib/operator.js
index b6243f16..e715b412 100644
--- a/packages/server/lib/operator.js
+++ b/packages/server/lib/operator.js
@@ -2,8 +2,8 @@ const db = require('./db')
 const _ = require('lodash/fp')
 
 function getOperatorId(service) {
-  const sql = `SELECT operator_id FROM operator_ids WHERE service = '${service}'`
-  return db.oneOrNone(sql).then(_.get('operator_id'))
+  const sql = 'SELECT operator_id FROM operator_ids WHERE service = ${service}'
+  return db.oneOrNone(sql, { service }).then(_.get('operator_id'))
 }
 
 module.exports = { getOperatorId }