Nice try but, it's amateur work
Why?
1.Exploit you can edit the character get variable and see other players inventory:)
2.Sql injection on the same variable :). You will expose the l2 DB.Not a good job.
Don't get me wrong, nice idea nice job but it needs some fixes.:)