corrected names from table

replaced the names for the table columns in the prepared statement