added htmlspecialchars(strip_tags($item)) to avoid hacks on user input