Possible SQL Injection problem? Escape the username and really, any other information that gets typed in.