I edited it before you posted... I fixed it. I'm learning slowly ;)

I see, still Id recommend you to pass $username as argument in function tab() instead of declaring it as superglobal variable. As you see, superglobals have security issues and I've been removing them from the core script since Mys v1.3.0 release.

I don't know how :(