htmlspecialchars with simple and double quotes encoded