sending text input with quotes, etc...

This is more related to HTML but forgive me: I am writing a web based email program for the boss. Since he will be able to send message in html format, and since he doesn't know it well, I want him to be able to see his message before sending it. So I need a hidden input that will carry a users message to the real script through confirmation page. Like <input type=hidden name=message value=......................> What should be instead of those dots? The message may have single quotes, double quotes and newlines. if the message user wants to send is hello friend, "blah blah" and 'blah blah' s u later. the 's and "s don't allow me to put any enclosing quotes around the message, then the newlines and blank spaces cut message to only one word. Any help is appreciated. Oguz.