Three Word Game

by Hensixteen

HTML

<!DOCTYPE html>
<html>
<center><h1>Welcome! Enter up to three words, then press "Add To Story" to continue the story!</h1> 
<br>
<br>
<br>

<form>
  <input id="word1" type="text" name="word1">
  <input id="word2" type="text" name="word2">
  <input id="word3" type="text" name="word3">
</form>

<button onclick="updateStory()">Add To Story</button>
	
	</center>

<br> 

<p id="story"></p>

<br>
<center>
<button onclick="clearStory()">Clear Story</button>
</center>
<p hidden id="lastPerson">
</p>
<p hidden id="userId">
</p>
<script src="https://www.gstatic.com/firebasejs/4.11.0/firebase.js"></script>
<script type="text/javascript">
  var userip;
</script>
<script type="text/javascript" src="https://l2.io/ip.js?var=userip"></script>
<script type="text/javascript">
  document.getElementById("userId").innerHTML = (userip);
</script>
<script>
  // Initialize Firebase
  var config = {
    apiKey: "AIzaSyAe_Y3RxB_h75PcD2Dz5KJ-GfZ_XysOgYI",
    authDomain: "three-word-game.firebaseapp.com",
    databaseURL: "https://three-word-game.firebaseio.com",
    projectId: "three-word-game",
    storageBucket: "gs://three-word-game.appspot.com",
    messagingSenderId: "4222397042"
  };
  firebase.initializeApp(config);

var database = firebase.database();
var ref = firebase.database().ref('story');

readStory();
readLastPerson();

function updateStory() {
  
  var lastPerson = document.getElementById("lastPerson").innerHTML;
  var userId = document.getElementById("userId").innerHTML;
  var addToStory;
  var oldStory = document.getElementById("story").innerHTML;
  
  console.log("User: " + userId);
  console.log("Last User: " + lastPerson);
  
  var word1 = document.getElementById('word1').value;
	var word2 = document.getElementById('word2').value;
	var word3 = document.getElementById('word3').value; 
  
  var multipleWords = word1.includes(" ") || word2.includes(" ") || word3.includes(" ");
  var htmlInject = word1.includes("<") || word2.includes("<") || word3.includes("<");
  var...