Fix nickname vulnerability
Tweak nickname replace