What better way to prevent this? I usually use htmlspecialchars() but I'm sure this is not the best practice.
Any smarter ways around this?
