escape html charcters on register / add post / add comment actions