Player report:
- No check for custom category (might not have HTML disabled)
- HTML might not be disabled in "what they've done"
- No check for the validity of player ID
- Possible to submit null ID, category, and body (using 7-bit ASCII character, �)
Gangs:
- Possible HTML in gang applications
- No check for whether the application is null
Other:
- Error returned on top of shops.php
- No check on itemmarket.php, auction.php, and pointauction.php for whether the user is in hospital or jail (possibly other pages)