[Daniel]

$user = $_REQUEST['username'];
$pass = $_REQUEST['password'];


$user=strip_tags($user);
$pass=strip_tags($pass);

$user=str_replace(" ","",$user);
$pass=str_replace(" ","",$pass);

$user = mysql_real_escape_string($user);
$pass = mysql_real_escape_string($pass);