$usern=$_POST["UserName"];
$whattostrp = array("'", ")", "(", ";","*","-",">","<","&");

function clean($source) {
 $sanatize=explode(" ", $source);
 $sanatize=$source[0];
 $sanatize = str_replace($whattostrp, "", "$source");
 $sanatize=stripslashes($source);
 $sanatize=strip_tags($source);
 $sanatize=mysql_real_escape_string($source);
 return $sanatize;
}


$usern = clean($usern);