added a much needed htmlspecialchars

without this it would be really easy to break html structures