Updated view.php

I put htmlspecialchars() into the var_check to avoid the XSS injection.
Merge pull request #2 from sanatem/master

Security update View::var_check();