Escape any html in subject and message to prevent malicious scripts from being injected