change from double quote to single quote to avoid double-encoding by htmlspecialchars()