WordPress Security in WordPress - Escaping escape attributes
Example
<input type="text" value="<?php echo esc_attr($_POST['username']); ?>" />
<input type="text" value="<?php echo esc_attr($_POST['username']); ?>" />
