Updated to validate all input server side and html5 client side and html encode output, attempting to thwart xss and attacks through email