I know what your saying. what I am saying is your issue is with an & being in the username whereas you can see my first fix basically added un_htmlspecialchars to the showphoto which fixed the file. My next suggestion basically does what we did in showphoto to the entire application.
You can try in pp-inc.php line 2437
Code:
Content visible to verified customers only.
change to this
Code:
Content visible to verified customers only.