security to prevent cross-site scripting (XSS)
security to prevent SQL injection attacks
security against SQL injection and XSS attacks

I accidentally committed to datoro88/digoro so I'm merging from there