change the escaping method in login.php