added htmlspecialchars and strip_tags functions to user input to sanitize output