I really don't like using strip_tags on things since it isn't really related to the problem (the problem being we don't escape agent strings), so the useragent is now passed through htmlspecialchars