I think it work ok, but in my opinion this is not really a good way.
If i were you, I will use POST method to avoid posting variable to address
Btw, you should print some thing when there is no username match $_GET['username'], kind da like: User name ABC not found or st
