diff --git a/db/account.go b/db/account.go
index cef7e1f..a2be5d4 100644
--- a/db/account.go
+++ b/db/account.go
@@ -26,7 +26,7 @@ func AddAccountSession(username string, token []byte) error {
 
 func GetUsernameFromToken(token []byte) (string, error) {
 	var username string
-	err := handle.QueryRow("SELECT a.username FROM accounts a JOIN sessions s ON s.uuid = a.uuid WHERE s.token = ? AND s.expire > UTC_TIMESTAMP()").Scan(&username)
+	err := handle.QueryRow("SELECT a.username FROM accounts a JOIN sessions s ON s.uuid = a.uuid WHERE s.token = ? AND s.expire > UTC_TIMESTAMP()", token).Scan(&username)
 	if err != nil {
 		if err == sql.ErrNoRows {
 			return "", err