diff --git a/src/routes/(angemeldet)/upload/+page.server.ts b/src/routes/(angemeldet)/upload/+page.server.ts
index 55db9cb..7d413b4 100644
--- a/src/routes/(angemeldet)/upload/+page.server.ts
+++ b/src/routes/(angemeldet)/upload/+page.server.ts
@@ -23,7 +23,15 @@ export const actions = {
 		const code = data.get('zugangscode');
 		const fileName = data.get('fileName');
 
-		let objectName = `${vorgang}/${name}`;
+		// store case in database
+
+		let db = new Database('./src/lib/data/tatort.db');
+		let token = uuidv4();
+		let insert_stmt = `INSERT INTO cases (token, name, pw) VALUES (?, ?, ?)`;
+		const stmt = db.prepare(insert_stmt);
+		stmt.run(token, vorgang, code);
+
+		let objectName = `${token}/${name}`;
 		switch (type) {
 			case 'image/png':
 				if (!objectName.endsWith('.png')) objectName += '.png';
@@ -35,14 +43,6 @@ export const actions = {
 
 		const url = await client.presignedPutObject('tatort', objectName);
 
-		// store case in database
-
-		let db = new Database('./src/lib/data/tatort.db');
-		let token = uuidv4();
-		let insert_stmt = `INSERT INTO cases (token, name, pw) VALUES (?, ?, ?)`;
-		const stmt = db.prepare(insert_stmt);
-		stmt.run(token, vorgang, code);
-
 		return { url };
 	},
 	validate: async ({ request }: { request: Request }) => {