https://debunkingreligiousright.blogspot.com/2023/08/is-it-better-to-escapeencode-user-input.html