used htmlspecialchars instead esacpe widget