diff --git a/src/routes/(angemeldet)/upload/+page.server.ts b/src/routes/(angemeldet)/upload/+page.server.ts
index 7d175e2..5ae9e08 100644
--- a/src/routes/(angemeldet)/upload/+page.server.ts
+++ b/src/routes/(angemeldet)/upload/+page.server.ts
@@ -40,9 +40,9 @@ export const actions = {
 			const vorg = getVorgangByName(caseName);
 			token = vorg.token;
 			if (vorg.pw != password) {
-				let updateSQLStmt = `UPDATE cases SET pw = ? WHERE name = ?`;
+				const updateSQLStmt = `UPDATE cases SET pw = ? WHERE token = ?`;
 				const statement = db.prepare(updateSQLStmt);
-				statement.run(password, vorg);
+				statement.run(password, token);
 			}
 		}