I know I'll get flamed for this, but that's actually beautifully elegant.
<?php echo htmlspecialchars($username); ?>Do you think values should be escaped before output? Or that usernames don't include chars that need escaping in HTML? Or perhaps you'd add extra filtering to ensure that page cannot become ill-formed due to encoding error? Or perhaps it's incorrect to use PHP at all? ;)