hi, i read the tutorial you wrote about php security. i am concern with how to avoid cross site scripting in php - i dont know where to start, can you help me figure out where i can start to prevent cross site script on my website. thanks