SECURITY: Fix variable usage in ApiQueryUserContributions