add escape_html function
implementing redirection