Repairs improperly escaped $row->attachfile in edit.php

$row->attachfile, when containing a single quote, breaks the javascript
on admin/views/article/tmpl/edit.php. This patch escapes the output with
htmlentities