remove special char and using htmlspecialchars as source code changes