diff --git a/README.md b/README.md
index 0e08b54..791a932 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 to setup (requires node.js):
 
-* create a copy of example_config.json named config.json
+* (in the config folder) create a copy of example_config.json named config.json
 * fill out empty values with correct values in config.json (token is discord token, cookie is .ROBLOSECURITY cookie, clientId is the bot's ID (right click bot in discord then choose copy ID with developer mode enabled))
 * install dependencies
 ```
diff --git a/commands/submit.js b/commands/submit.js
index 8d98559..b240145 100644
--- a/commands/submit.js
+++ b/commands/submit.js
@@ -2,8 +2,35 @@ const { SlashCommandBuilder } = require('@discordjs/builders');
 const { parse } = require("csv-parse/sync");
 const fs = require('node:fs');
 const noblox = require("noblox.js");
+const axios = require("axios").default
+
+async function robloxUserFromDiscord(id) {
+    if (isNaN(id)) return undefined;
+    try  {
+        const res =  await axios.get(`https://verify.eryn.io/api/user/${id}`)
+        return res.data.robloxId
+    } catch (error) {
+        return undefined;
+    }
+}
+
+async function robloxUsernameFromId(id) {
+    if (isNaN(id)) return undefined;
+    try  {
+        const res =  await axios.get(`https://users.roblox.com/v1/users/${id}`)
+        return res.data.name
+    } catch (error) {
+        return undefined;
+    }
+}
 
 async function execute(interaction) {
+    const userId = await robloxUserFromDiscord(interaction.user.id)
+    if (!userId) {
+        const msg = "You don't have a Roblox account linked with your Discord account. Visit https://verify.eryn.io/";
+        await interaction.reply({content: msg, ephemeral: true});
+        return;
+    }
     const game = interaction.options.getString("game");
 
     let fname;
@@ -26,6 +53,13 @@ async function execute(interaction) {
             await interaction.reply({content: `(id: ${id}) is not a valid model ID.`, ephemeral: true});
             return;
         }
+        if (info.Creator.Id != userId) {
+            const assetUsername = await robloxUsernameFromId(info.Creator.Id);
+            const interactionUsername = await robloxUsernameFromId(userId);
+            const msg = `The account linked to your Discord (${interactionUsername}) is not the owner of this model (${assetUsername}), so you cannot submit it.`
+            await interaction.reply({content: msg, ephemeral: true});
+            return
+        }
     } catch (error) {
         console.log(error);
         await interaction.reply({content: `There is a problem with this asset ID (id: ${id}).`, ephemeral: true});
diff --git a/config/.gitignore b/config/.gitignore
new file mode 100644
index 0000000..bdf2e35
--- /dev/null
+++ b/config/.gitignore
@@ -0,0 +1,3 @@
+*
+!example_config.json
+!.gitignore
\ No newline at end of file
diff --git a/example_config.json b/config/example_config.json
similarity index 100%
rename from example_config.json
rename to config/example_config.json
diff --git a/package.json b/package.json
index 3e5a6fd..d34d389 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,7 @@
   "dependencies": {
     "@discordjs/builders": "^0.13.0",
     "@discordjs/rest": "^0.4.1",
+    "axios": "^0.27.2",
     "csv-parse": "^5.0.4",
     "discord-api-types": "^0.32.1",
     "discord.js": "^13.6.0",