diff --git a/app/api/join/route.ts b/app/api/join/route.ts
index 9f8e3dd..6ee6a84 100644
--- a/app/api/join/route.ts
+++ b/app/api/join/route.ts
@@ -11,7 +11,8 @@ async function getAdminToken(): Promise<string | null> {
   const password = process.env.POCKETBASE_PASSWORD;
   if (!email || !password) return null;
 
-  const res = await fetch(`${PB_URL}/api/admins/auth-with-password`, {
+  const pb = getPocketBaseConfig();
+  const res = await fetch(`${pb.url}/api/admins/auth-with-password`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ identity: email, password }),
diff --git a/app/api/upload-media/route.ts b/app/api/upload-media/route.ts
index dfbaf1b..f286c61 100644
--- a/app/api/upload-media/route.ts
+++ b/app/api/upload-media/route.ts
@@ -8,7 +8,9 @@ export async function POST(request: NextRequest) {
     const form = await request.formData();
     const file = form.get("file");
     const fileObj =
-      file instanceof File ? file : file instanceof Blob ? file : null;
+      file != null && typeof file === "object" && "size" in file
+        ? (file as File | Blob)
+        : null;
 
     if (!fileObj || fileObj.size === 0) {
       return NextResponse.json(