Admin edits passed through non-doubling htmlspecialchars.php