From 2728fc6e837a1e8dba2863f71e7a40128356e3aa Mon Sep 17 00:00:00 2001
From: Lncvrt <lncvrtreal@gmail.com>
Date: Wed, 31 Dec 2025 23:48:25 -0700
Subject: [PATCH] Could've been bad lmao

---
 database/uploadAccountProfileMessage.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/database/uploadAccountProfileMessage.php b/database/uploadAccountProfileMessage.php
index a6c6ce1..7af0e7d 100644
--- a/database/uploadAccountProfileMessage.php
+++ b/database/uploadAccountProfileMessage.php
@@ -22,8 +22,8 @@ if ($result->num_rows != 1) exitWithMessage(json_encode(["success" => false]));
 $row = $result->fetch_assoc();
 $id = $row["id"];
 
-$stmt2 = $conn1->prepare("SELECT * FROM userdata WHERE id = ?");
-$stmt2->bind_param("i", $id);
+$stmt2 = $conn1->prepare("SELECT * FROM userdata WHERE token = ? AND id = ?");
+$stmt2->bind_param("si", $token, $id);
 $stmt2->execute();
 $result2 = $stmt2->get_result();
 if ($result2->num_rows != 1) exitWithMessage(json_encode(["success" => false]));