added htmlentities() to comment_post & message_post