htmlspecialchars for EMAIL and OTP