illegal chars in REQUEST[login]: username%3D%26uyeid%3D0