handle sanitize message with htmlencode