Fixes issue #07851: SQL injection in "user_name" form field (thanks fromanmu)
Dev: fix f84caa05838d0d3ec583ae743fdd5f47a24246a5 for bracket