use str_replace in helper security
luca cecere did it... i'm DRUNK
yeah i'm drunk but i can fix things anyway