You can add checks like this to imporve security. you should also add this check in the registration page.// If the username does not contains letters or numbers, gives a error.if (!ctype_alnum($username){...