[php] htmlentities() vs. htmlspecialchars()