htmlspecialchars isn't necessary