diff --git a/upload/forgot.php b/upload/forgot.php
index 3f94af7f..7c88ff14 100644
--- a/upload/forgot.php
+++ b/upload/forgot.php
@@ -27,7 +27,7 @@ require 'includes/config.inc.php';
 	 * Reseting Password
 	 * Real Reseting ;)
 	 */
-	$user = get('user');
+	$user = mysql_clean(get('user'));
 	if($mode =='reset_pass' && $user)
 	{
 		$input = mysql_clean(get('user'));