While examining admin orders.php

1) these form urls have quotation marks and spaces. Are these not considered unsafe characters and so should be encoded?

Click image for larger version.  Name: admin_orders_html_source.jpg  Views: 46  Size: 20.9 KB  ID: 16117
embedded image will not popup so here is an example:

<form name="search" action="https://www.motorvista.local/tienda_155/admin1/orders.php?class="form-control" method="get">
(Note this image is a gif and named as such but the forum software insists on naming it as a jpg)

2) This page has a lot of changes. Why not change the current admin doctype to a valid html5 one to allow the new ids, datatypes etc?