Can i make a function for just a list of blocked words that cant be used as username? And how to make it like only my web app can read it?
TL;DR
Create a function to check if a username contains any of the blocked words. Store the list of blocked words in a separate file outside the public directory so only your web app can access it.