add htmlspecialchars in profile view