Fix XSS in index.php - Escape key and login parameters