use htmlentities for textfield payment id