htmlspecialchars here as well would be welcome!