Just realized that this code have backdoor and it fetching out data from my database, how I know this is the user profile which I changed but it has the original on all users but in my file manager I have the replaced there but not showing on the frontend