diff --git a/gw-pull.php b/gw-pull.php
index 303a606..74d368f 100644
--- a/gw-pull.php
+++ b/gw-pull.php
@@ -1,5 +1,5 @@
 <?php
-$cnameid = $_GET['toonid']; //need to make this a POST or GET variable
+$cnameid = $_GET['toonid']; //need to sanitize this input somehow
 include_once 'gw-connect.php';
 $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
 if ($con->connect_errno > 0){
diff --git a/gw-toon.php b/gw-toon.php
index a79f153..1ec971d 100644
--- a/gw-toon.php
+++ b/gw-toon.php
@@ -9,6 +9,6 @@ if (!$result = $con->query($sql)){
 	die ('There was an error running the query [' . $con->error . ']');
 }
 while ($row = $result->fetch_array()){
-	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['playerid'] . '">' . $row['charname'] . '</A><BR />';
+	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['charname'] . '">' . $row['charname'] . '</A><BR />';
 }
 ?>