[int2e]

Every* web developer should be familiar with cross-site scripting (XSS) and how to prevent it. http://www.google.com/search?q=xss

* If you don't have a login system or any sensitive data, it might not matter much.