update
added htmlspecchar and striptags

to prevent script being posted in the fields. Still need to add remove
links and add a file