Use htmlspecialchars() when adding image URLs