If you are programming any publicly available web site, you need to be aware that user input can be tainted by a malicious user. You need to clean the input to be sure there are not any XSS attacks, SQL injection attacks, or just any HTML inserted you don’t want. An easy way to accomplish this task, if you are using PHP as your language, is to use the
PHP Input Filter. This is a simple (free) PHP class that you can easily clean user input with. You can find detailed instructions in its use in the
readme file.