Add back button
update to prevent sql injection
tag editor additions