Adding htmlentities()

Know its only a demo, but should be setting a good standard, for XSS Prevention. (sorry I can't see how to add more files to the request, other files are similly affected)