Coerce user input to UTF8 to avoid issues with character encoding and possible SQL injection

[terrymun]

User inputs have to be coerced into UTF-8 using utf8_encode() or the likes, instead of relying plainly on htmlspecialchars() in PHP.