Changed GET to POST and started escaping user input