dropping strip_tags and moving to htmlspecialchars