Maybe $HTTP_POST_VARS["user"] might work better, for getting the input from a form field.