Escape html of sample queries to prevent HTML breakage

htmlspecialchars() added to SQL samples