htmlspecialchars work instead?