Fix in-game player data manipulation

Fixes arbitrary character injection in usernames to manipulate in-game player data.