If you are programming any publicly available web site, you need to be aware that user input can be tainted by a malicious user. You need to clean the input to be sure there are not any XSS attacks, SQL injection attacks, or just any HTML inserted you don’t want.
Click here to read more