Use OC's p() function instead of echo commands to improve xss protection.