Page for each user created in the database

Basically this:

// ... lógica do login ...

header('Location: /'.$nomedousuario);
die();

• Sanitize the data to make sure that $nomedousuário has no special characters. If so, you'll need to use something like this:

  header('Location: /'.urlencode($nomedousuario));
  die();
  

• Always after using a redirection of this type, use die(); to ensure that nothing else on the page is processed and sent to the client. I've seen systems that served undue things for lack of this die() (the developer did not realize that he was sending confidential data, just because the redirect was taking place, but just turning off the redirect / em> to see the page)

• Specifying the Location: header requested the complete URL, including protocol and domain name. Then there was an RFC "loosening" the requirement, but where possible, pass the full path (PHP has variables for it, in $_SERVER ).