parameterized queries to prevent sql injection
parameterized queries in createPlayer to prevent sql injection
test for sql injection prevention using parameterized queries
check player exists before checking name
Merge pull request #13 from lantoli/master

parameterized queries to prevent sql injection