Updated view.php

I put htmlspecialchars() into the var_check to avoid the XSS injection.