Updated view.php

I put htmlspecialchars() into the var_check to avoid the XSS injection.
Really thanks for let me test your app!!