Esc attributes
Run post ID through absint()
Esc the value attribute
More escaping
Merge pull request #16 from pippinsplugins/master

Escape non-escaped attributes