title: How to escape output in PHP
body: <p>I am a newbie, just to be clear. I hear a lot about escaping data to prevent XSS attacks. How do I actually do that?</p>
  
  <p>This is what I am doing currently -</p>
  
  <pre><code>$s = mysqli_real_escape_string($connect,$_POST['name']));
  </code></pre>
  
  <p>Is this enough? Thanks</p>