htmlspecialchars() on query in searchform template