title: How do I remove special characters from GET submit
body: <p>I am having an issue with special characters with a web script that I have that executes a command to send a username to my game server to reward them for voting.</p>
  
  <p><code>&lt;form action="index.php" method="GET"&gt;
  &lt;input type="submit" value="Submit" /&gt;
  &lt;/form&gt;</code></p>
  
  <p>It submits to the database with the correct information special characters and all - but when executed to my gameserver it negates the special characters and they can abuse it by using the name Testusername/ or Testusername// and receive multiple rewards daily.</p>
  
  <p>I have tried using hidden types but my system cannot work with POST.</p>
  
  <p>Any ideas? I'm helpless.</p>
  
  <p><em><strong></em> EDIT <em>*</em></strong></p>
  
  <p>Any 0-9 _ a-z characters are allowed special characters being !@#$%^&amp;*()_+[}{} etc. I am using escape strings and I am not worried about sql injection I tried multiple ways of sanitizing and they all failed. I am using mySQL but not for the sending of the reward it is there as a log and to verify users that haven't voted in the last 24 hours and prevent them from doing it again. Basically putting it plain they vote with the username Test and get their reward and vote with the username Test/ and it says Test voted again ingame and the receive x2 the rewards</p>