sanitize body input on search.php
remove smtp_username check because it's done on install now