check canvas support before creating a player

PHP-injection, nice move)