esc_html() only takes one variable