Adding escaping

the and_add_new_redirect() method has no escaping in place opening to some security risks.
Merge pull request #1 from colegeissinger/patch-1

Adding escaping