i need more sql skill

gw-pull.php

@@ -1,5 +1,5 @@
 <?php
-$cnameid = $_GET['toonid']; //need to make this a POST or GET variable
+$cnameid = $_GET['toonid']; //need to sanitize this input somehow
 include_once 'gw-connect.php';
 $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
 if ($con->connect_errno > 0){

gw-toon.php

@@ -9,6 +9,6 @@ if (!$result = $con->query($sql)){
 	die ('There was an error running the query [' . $con->error . ']');
 }
 while ($row = $result->fetch_array()){
-	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['playerid'] . '">' . $row['charname'] . '</A><BR />';
+	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['charname'] . '">' . $row['charname'] . '</A><BR />';
 }
 ?>