- Consistency: Always encode before htmlspecialchars()