Security with user in bd + form html