escaping htmlspecialchars

Patched possibility of XSS via name="" attribute.