Escape HTML string and unescape php strings