diff --git a/src/inc/routes/apiv2/index.mjs b/src/inc/routes/apiv2/index.mjs
index 39ec60a..a7e1cd0 100644
--- a/src/inc/routes/apiv2/index.mjs
+++ b/src/inc/routes/apiv2/index.mjs
@@ -102,6 +102,12 @@ export default router => {
       const tagname = decodeURIComponent(req.params.tagname);
       const newtag = req.post.newtag;
 
+      if(['sfw', 'nsfw'].includes(tagname) || ['sfw', 'nsfw'].includes(newtag)) {
+        return res.json({
+          msg: 'f0ck you'
+        }, 405); // method not allowed
+      }
+
       const tmptag = (
         await sql('tags')
           .where('tag', tagname)