Fixed issue #07851: SQL injection in "user_name" form field