Player report:

- No check for custom category (might not have HTML disabled)
- HTML might not be disabled in "what they've done"
- No check for the validity of player ID
- Possible to submit null ID, category, and body (using 7-bit ASCII character, �)

Gangs:

- Possible HTML in gang applications
- No check for whether the application is null

Other:

- Error returned on top of shops.php
- No check on itemmarket.php, auction.php, and pointauction.php for whether the user is in hospital or jail (possibly other pages)