Fix exploit allowing anyone to crash the backend