Use htmlspecialchars() to protect us from HTML injection. Our users should be trustworthy to be making tutorials, since it requires a password, but it's still probably a good idea.