When users try to log in to my web application they have two options: their username or their email including password, both of them are unique.
When the logged-in user tries to write comments in the public comment box, shall I post his/her username as a name or ask them to write their name? What can I do for better security?
If I post their username as a name, their account is at risk since a hacker can take the username and try to login with it.