Remove bad code which improperly encoded variables
Encode all form variables to prevent XSS