Escape error messages to avoid outputting raw user input in HTML
Sanitise user input for play as well, and add form to control player count