Prepare statements for sql queries, use (int) to avoid nonint inputs

The goal of this edit is to prevent sql injection.
For string inputs like player name -> prepare sql statements.
For other inputs that are integers -> cast to int via (int)

gamelogreload.php

@@ -5,7 +5,7 @@
   header('Cache-Control: no-cache, no-store, max-age=0, must-revalidate');
   header('Expires: Mon, 26 Jul 1997 05:00:00 GMT'); // Date in the past
   header('Pragma: no-cache');
-  $spielID = $_GET['game'];
+  $spielID = (int)$_GET['game'];
   
   if ($Result = $mysqli->query("SELECT * FROM ".$spielID."_game"))
   {