Add htmlspecialchars instead of htmlentities function