another htmlspecialchars() wrapper for player name that I missed in earl...

...ier fix