Instead prevent "injections" by using innerText instead of innerHTML and parameterize SQL queries instead of concatenating strings. But you always want to sani

Instead prevent "injections" by using innerText instead of innerHTML and parameterize SQL queries instead of concatenating strings. But you always want to sanitize user input! Ever wondered how the average age of your user base was so high, only to discover that some users claim they are several million years old. You don't want to sanitize, you want to sanitYize. People writing their e-mail as street address and vice versa.