Have to check POST values against htmlentities too