title: How to echo a $_GET safely?
body: <pre><code>&lt;?php
      echo $_GET['id'];
  ?&gt;
  </code></pre>
  
  <p>Doesn't look very safe to me.. What is our best option to show an <code>GET</code> element?</p>
  
  <p>Something like a <code>preg_replace</code> on all the special characters, or <code>htmlspecialchars</code>?</p>