Pvp

<?php
include ("include/config.php");

function anti_injection($string){

   $string = str_replace(" or ", "", $string);
   $string = str_replace("select ", "", $string);
   $string = str_replace("delete ", "", $string);
   $string = str_replace("create ", "", $string);
   $string = str_replace("#", "", $string);
   $string = str_replace("=", "", $string);
   $string = str_replace("--", "", $string);
   $string = str_replace(";", "", $string);
   $string = str_replace("*", "", $string);
   $string = trim($string);
   $string = strip_tags($string);
   $string = addslashes($string);

   return $string;
 }

    $q = mysql_query("SELECT name, race, player_class, all_kill FROM abyss_rank LEFT JOIN players ON player_id = id WHERE player_id ORDER BY all_kill DESC LIMIT 10");
    echo "<table width='99%' border='0' cellpadding='0' cellspacing='0' bordercolor='#6b6b6b'>";
    echo "<tr align='center'>";
    echo "<td><font size='2'><b>Nombre</b></font></td>
    <td><font size='2'><b>Clase</b></font></td>
    <td><font size='2'><b>Pvp</b></font></td>
    <td><font size='2'><b>Raza</b></font></td>";
    echo "</tr>";

    while($row = mysql_fetch_array($q))
    {

        if ($row["race"] == 'ELYOS') {$race = "<img src='/emblem/race_icon_1.png'>";}
        elseif ($row["race"] == 'ASMODIANS') {$race = "<img src='/emblem/race_icon_2.png'>";}

        if($row["player_class"] == 'SPIRIT_MASTER'){$class = "<img src='/class/icon_emblem_elementalist.png'>";}
        elseif ($row["player_class"] == 'SORCERER'){$class = "<img src='/class/icon_emblem_wizard.png'>";}
        elseif ($row["player_class"] == 'ASSASSIN'){$class = "<img src='/class/icon_emblem_assassin.png'>";}
        elseif ($row["player_class"] == 'RANGER'){$class = "<img src='/class/icon_emblem_ranger.png'>";}
        elseif ($row["player_class"] == 'CLERIC'){$class = "<img src='/class/icon_emblem_priest.png'>";}
        elseif ($row["player_class"] == 'CHANTER'){$class = "<img src='/class/icon_emblem_chanter.png'>";}
        elseif ($row["player_class"] == 'GLADIATOR'){$class = "<img src='/class/icon_emblem_knight.png'>";}
        elseif ($row["player_class"] == 'TEMPLAR'){$class = "<img src='/class/icon_emblem_fighter.png'>";}

        echo "<tr align='center'>";
        echo "<td><font size='2'>".$row["name"]."</font></td>";
        echo "<td><font size='2'>".$class."</font></td>";
        echo "<td><font size='2'>".$row["all_kill"]."</font></td>";
        echo "<td><font size='2'>".$race."</font></td>";
        echo "</tr>";
    }
    echo "</table><br />";
?>