look at the function htmlspecialchars();
you should get to know that if you want to protect against malicous html and
javascript code.