Special characters in player names

Found this when a player had '<' and '>' in their name, so wrap in htmlspecialchars()