htmlentities scripts before database