$sitename = htmlspecialchars(param('sitename', ''), ENT_QUOTES);
$sitebrief = htmlspecialchars(param('sitebrief', ''), ENT_QUOTES);