Fixed some possible sql injections, added submitter username to view_game page