escape request values, ENT_QUOTES