strlen = utf8_strlen(htmlspecialchars_decode($username)
long but required