Fix double htmlspecialchars on input