escaping javascript when return html in ajax
refactoring to source and dest databases, add an admin database