Fix the problem that allows complicated user names that can be used for an SQL injection.