Fixed #1 in login page view

view/login.php

@@ -46,7 +46,11 @@
                 <form method="POST" action="" id="login_form">
                     <tr>
                         <td><label>Username</label></td>
-                        <td><input id="field_username" type="text" name="username" value="<?php if (isset($username)) { echo $username; } ?>" autofocus/></td>
+                        <td><input id="field_username" type="text" name="username" value="
+                            <?php 
+                                if (isset($username)) { echo preg_replace('/[^a-zA-Z0-9\ \.\,\:\(\)]/', '', $username); } 
+                            ?>
+                            " autofocus/></td>
                     </tr>
                     <tr>
                         <td><label>Password</label></td>