From d5e5f03ef5610d6d97a772b2d2515165f74bdd02 Mon Sep 17 00:00:00 2001
From: Bluzume <39113159+KuromeSan@users.noreply.github.com>
Date: Mon, 9 Aug 2021 19:11:58 +1200
Subject: [PATCH] Update checks.php

---
 WebInterface/game-site/web/checks.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/WebInterface/game-site/web/checks.php b/WebInterface/game-site/web/checks.php
index 0f34786..1eeb4f2 100644
--- a/WebInterface/game-site/web/checks.php
+++ b/WebInterface/game-site/web/checks.php
@@ -1,6 +1,7 @@
 <?php
 session_start();
 include("config.php");
+include("crosserver.php");
 include("header.php");
 ?>
 <TABLE WIDTH=100% CELLPADDING=10><TR><TD>
@@ -23,9 +24,9 @@ USA<BR>
 <B>Identify Your Payment:</B><BR>
 Be sure to include a CLEAR note of what account this is for. Include your email address in case there are problems identifying the account.<BR>
 <UL><FONT COLOR=440044 SIZE=+0>
-Your USERNAME = <?echo($_SESSION['USERNAME']);?><B></B><BR>
-Your ACCOUNT ID = <?echo($_SESSION['PLAYER_ID']);?><B></B><BR>
-Your SERVER = <B><?phpecho($server_id);?></B> (make sure this is the one you play on)<BR>
+Your USERNAME = <?php echo(htmlspecialchars($_SESSION['USERNAME'])); ?><B></B><BR>
+Your ACCOUNT ID = <?php echo(htmlspecialchars($_SESSION['PLAYER_ID'])); ?><B></B><BR>
+Your SERVER = <B><?php echo($server_id); ?></B> (make sure this is the one you play on)<BR>
 
 </UL></FONT>
 <B>Finally, let us know what it is for:</B><BR>