Typo in a query: uid column unknown in upload table

I am attaching a tested patch for the bug. Marking as critical as it blocks download of files if in private mode.

-  $result = db_query("SELECT f.* FROM {files} f INNER JOIN {upload} u ON f.fid = u.uid WHERE filepath = '%s'", $file);
+  $result = db_query("SELECT f.* FROM {files} f INNER JOIN {upload} u ON f.fid = u.fid WHERE filepath = '%s'", $file);