added htmlspecialchars where needed