Fix php tags or so
Add htmlspecialchars() 2nd and 3rd params for security