This example shows how to print a string of text on a webpage literally so that any HTML tags inside the text do not get interpreted. The output of the example below should be the following:

Here's my <b>bold</b> text. Attempt to perform cross-site scripting with <script>alert('XSS successful!')</script>

// Set the text value
$text = "Here's my <b>bold</b> text. Attempt to perform cross-site scripting
         with <script>alert('XSS successful!')</script>";

// Escape the text and output it to the webpage, which should display the string *exactly*
// as you see $text displayed above. If the string were not escaped, the word "bold" would
// appear in bold on the page, and it would cause a JavaScript pop-up saying "XSS successful!".
print REDCap::escapeHtml($text);