added html strips to database update / insert and to all incoming cgi parameters