Prevent cross-site-scripting by escaping input text.

Pointed out by: "Benjamin Krueger" <roo@ufies.org>
Reference: http://securityfocus.com/cgi-bin/archive.pl?id=1&mid=220101&start=2001-10-09&end=2001-10-15