Removing possibility to make XSS attacks

Dunno why you echo that out (maybe for testing, yeah..) but if you echo anything out, use htmlspecialchars() to prevent XSS!