make links html safe (these are already coverted back in tep_redirect())