Added security

used htmlspecialchars when echoing data