add htmlentities - need to fix, didn't work