diff --git a/src/server/cyberhex-code/api/php/accessctrl/check_apikey.php b/src/server/cyberhex-code/api/php/accessctrl/check_apikey.php
index 20a0090..17fda79 100644
--- a/src/server/cyberhex-code/api/php/accessctrl/check_apikey.php
+++ b/src/server/cyberhex-code/api/php/accessctrl/check_apikey.php
@@ -43,7 +43,7 @@ function load_secret(){
 	else{
 		$apikey=$_GET["apikey"];
 		$machineid=$_GET["machine_id"];
-		$sql = "SELECT * FROM secrets machine_id = ?";
+		$sql = "SELECT * FROM secrets WHERE machine_id = ?";
 		$stmt = $conn->prepare($sql);
 		$stmt->bind_param("s",$machineid);