In order to specify a random string, you must include it in double quotes, and htmlspecialchars() the whole value.
In order to specify a random string, you must include it in double quotes, and htmlspecialchars the whole value.