Prevented cross site scripting and SQL injections