Added htmlspecialchar + unset var if not used