I noticed that if a user has a cookie on their machine when an administrator deletes them, that user will then get an error if they go to Your Profile because the code finds the cookie on the machine and goes to look into the DB. It doesnt return anything and then tries to use the length function on an empty string thus returning an error. It should probably check the row count of the query to see if a user is returned at all. If there are no rows, it should delete the cookie and kick to the register page (atleast thats my opinion)