Fix xss issue in php error output

[jason-platts]

This php change sanitises error message output to prevent Reflected Cross-Site Scripting using htmlspecialchars() e.g. php/jsmol.php?call=getInfoFromDatabase&database=<svg/onload=alert(document.cookie)> will output an error which executes the javascript.