replace htmlentities() with htmlspecialchars() since it is broken with non iso-8859...