You can add checks like this to iomprve security. you should also add this check in the registration page.// If the username does not contains letters or numbers, gives a error.if (!ctype_alnum($username){ die( Invalid username. ); }