https://thegioigiaitri69.blogspot.com/2024/08/is-it-better-to-escapeencode-user-input.html