diff --git a/admin/insert.php b/admin/insert.php
index 883ca8a..9f5abb2 100644
--- a/admin/insert.php
+++ b/admin/insert.php
@@ -1,7 +1,12 @@
 <?php
 	require '../credentials.php';
 	require '../php/utils.php';
-	
+
+	$credentials = new Credentials();
+	if ($credentials->adminToken != ($_POST["token"] ?? "")) {
+		exit();
+	}
+
 	$csvname = $_FILES['csvname']['tmp_name'];
 	$dbname = $_POST['dbname'];