escape user data

[meeech]

entitize user data thats submitted. like bug #1, but a but more robust solution for all cases.

[meeech]

not such a good solution. figure out why escaping isn't working.