Fix some XSS attacks in index.php