diff --git a/system/controllers/register.php b/system/controllers/register.php
index 13aeb2c9..27cab2f0 100644
--- a/system/controllers/register.php
+++ b/system/controllers/register.php
@@ -19,12 +19,14 @@ $otpPath = 'system/cache/sms/';
 switch ($do) {
     case 'post':
         $otp_code = _post('otp_code');
-        $username = _post('username');
+        $username = alphanumeric(_post('username'),"+_.");
         $fullname = _post('fullname');
         $password = _post('password');
         $cpassword = _post('cpassword');
         $address = _post('address');
-        $phonenumber = _post('username');
+        if(!empty($config['sms_url'])){
+            $phonenumber = $username;
+        }
         $msg = '';
         if (Validator::Length($username, 35, 2) == false) {
             $msg .= 'Username should be between 3 to 55 characters' . '<br>';
@@ -73,7 +75,7 @@ switch ($do) {
         if ($msg == '') {
             run_hook('register_user'); #HOOK
             $d = ORM::for_table('tbl_customers')->create();
-            $d->username = $username;
+            $d->username = alphanumeric($username,"+_.");
             $d->password = $password;
             $d->fullname = $fullname;
             $d->address = $address;