serving html with string concatenation is just like creating sql statements with string concat. At least thats how I see it. Ideally you'd use something simila

serving html with string concatenation is just like creating sql statements with string concat. At least thats how I see it. Ideally you'd use something similar to prepared statements, just for html templates.