escape html chars before insert the post