Thread:Extension talk:UserAdmin/PurgeUser usernames not SQL escaped!