diff --git a/php/stats.php b/php/stats.php
index 620e394..2f1bedf 100644
--- a/php/stats.php
+++ b/php/stats.php
@@ -78,7 +78,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -113,7 +113,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -149,7 +149,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -183,7 +183,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
diff --git a/php/user.php b/php/user.php
index 0a2efee..decb81f 100644
--- a/php/user.php
+++ b/php/user.php
@@ -135,7 +135,7 @@ if(count($users) == 1) {
             <?php
             foreach($users as $res) {
               echo '<tr>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '<td>' . number_format($res['total'],0) . '</td>';
               echo '</tr>';