PHP Security - Cross-Site Scripting Example and Prevention