"Attack Vector to inject script?" - Joomla! Forum - community, help and support

hi there,
can please tell me should avoid this?

"you should use htmlspecialchars() in code before writing html attribute, else open attack vector inject script code page."

http://docs.joomla.org/using_the_page_c ... plate_code

i don't know how to use htmlspecialchars()

thanks,
john

"&" = "&" pretty have worry in urls.