added string escaping
added string escaping
added new image to uploads dir