diff --git a/en/recovery-challenge.cgi b/en/recovery-challenge.cgi
index 837f0cc..debd7eb 100755
--- a/en/recovery-challenge.cgi
+++ b/en/recovery-challenge.cgi
@@ -72,7 +72,7 @@ submit_challenge() {
 			"$runtime_dir/$arg_username" 2>&1 | 
 			sed -n 's/.*using.*key \(.*\)/\1/p')" == \
 			"$keyid" ]]; then
-			echo "$key" >> "/vm/$username/.ssh/authorized_keys"
+			echo "$key" >> "/vm/$arg_username/.ssh/authorized_keys"
 			page=success
 			return
 		else