sort and startMessage were being set from $_GET without checking to make sure they...