[Abagail]

If you're considered about moderating this, you could simply make it to where an admin or trusted player has to finalize a namechange request before it goes through. You should also be wary of: names that go over the 24 limit (SetPlayerName does not have a check for this, if they attempt to login it won't let them), SQL injection (escape strings or use %e in mysql_format), improper name formats depending on what you allow and don't allow.