Updated function _embed().

I use PHP's native parse_url and parse_str functions instead of preg_replace.
I find parse_url more reliable, as it does not depend on user input.
Additionally, there has to be htmlspecialchars_decode function to make sure,
that there are no "&amp;" instead of "&".