htmlspecialchars() is better the internet said.