In order to specify a random string, you must include it in double quotes, and htmlspecialchars() the whole value.
HTML interpretation. In order to specify a random string, you must include it in double quotes, and htmlspecialchars() the whole value.