Added escaping and validation for the review input form