Fix: now escaping input fields to help prevent injection