Use secrets() rather than deprecated secret()
Use xml_escape() rather than deprecated html_escape()