Escape output in a PHP template Php htmlspecialchars with the flags spelled out, because the defaults have changed between versions. PHP php security xss templates chris