$username = $_GET['name']; $username = str_replace("<", "<", $username); $username = str_replace('"', """, $username); $username = str_replace("'", "'", $username); $username = str_replace("javascript", "'", $username); help me,pls.Thanks you so much