<font color="#FFFFFF"><input style="height: 20px" size="25" name="user_name" value="<?echo($user)?>" DISABLED></font></td>
$user_name = mysql_real_escape_string($_POST['user_name']);