Prevented possible SQL injection from player names