PHP extension: a simple XSS handler