Escape input! Always escape input!