Fix #1617 Sanitize input from MyBB server

Fix #1617 Sanitize input from MyBB server
Look at how $server_stats_url is built, then look at how $string is built.