From 5bed064698d7b20ce6d61785a747bff8abb41b6d Mon Sep 17 00:00:00 2001
From: mauirixxx <mauirixxx@users.noreply.github.com>
Date: Wed, 17 May 2017 23:47:05 -1000
Subject: [PATCH] i need more sql skill

---
 gw-pull.php | 2 +-
 gw-toon.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/gw-pull.php b/gw-pull.php
index 303a606..74d368f 100644
--- a/gw-pull.php
+++ b/gw-pull.php
@@ -1,5 +1,5 @@
 <?php
-$cnameid = $_GET['toonid']; //need to make this a POST or GET variable
+$cnameid = $_GET['toonid']; //need to sanitize this input somehow
 include_once 'gw-connect.php';
 $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
 if ($con->connect_errno > 0){
diff --git a/gw-toon.php b/gw-toon.php
index a79f153..1ec971d 100644
--- a/gw-toon.php
+++ b/gw-toon.php
@@ -9,6 +9,6 @@ if (!$result = $con->query($sql)){
 	die ('There was an error running the query [' . $con->error . ']');
 }
 while ($row = $result->fetch_array()){
-	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['playerid'] . '">' . $row['charname'] . '</A><BR />';
+	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['charname'] . '">' . $row['charname'] . '</A><BR />';
 }
 ?>