Your code returns the image for the
last
user in your table.
Here:
insert.CommandText = "SELECT profilePicture from SystemUser";
you select
all
users from the table (not just the one you currently show). Then:
while (reader.Read())
{
...
url = ...
...
}
you
re-assign
url
inside
every
iteration of your while loop. This is semantically equivalent to:
url = ... /* The value determined from the last record of the reader. */
Thus, all your users show the same image - the one of the
last
user in your table.