Added simple help plugin
Fixed possible vulnerability caused by bad escaping

I misunderstood the issue in the previous commit.

Relevant MSDN page on escaping:
http://msdn.microsoft.com/en-us/library/a1y7w461.aspx