diff --git a/login.php b/login.php
index 925ba664..bcc238e4 100644
--- a/login.php
+++ b/login.php
@@ -65,7 +65,7 @@ if ($_SERVER['REQUEST_METHOD'] == "POST")
         {
             $error = 1;
             $tMessage = '<span class="error_msg">' . $PALANG['pLogin_failed'] . '</span>';
-            $tUsername = $fUsername;
+            $tUsername = htmlentities($fUsername, ENT_QUOTES, 'UTF-8');
         }
     }
     else