FIX: XSS bug

Called htmlentities on value of textarea to prevent XSS injection.
Example: Someone creates a post with </textarea><script>alert("xss");</script><textarea> in it. Some admin clicks on edit and JavaScript will be executed. (could leak cookie of admin)