urlencode => htmlspecialchars