User inputs aren't escaped and `Input::get()` / `Input::post()` don't clean the values. Should use the clean() function or add a new a new function to clean the user data before displaying them.