select the right survivor by adding `AND world_id = $world` to the SQL select
prevent some SQL injections (using mysql_real_escape_string)
Merge pull request #46 from p-schneider/patch-1

sometimes wrong inventory is shown when having multible instance in the database