htmlspecialchars; work on modal dialogs for setting perms