<?php $foo = htmlspecialchars($_GET['foo'], ENT_QUOTES);$bar = htmlspecialchars($_GET['bar'], ENT_QUOTES);?><input type=text name=foo value="<?php echo $foo?>"/><input type=text name=bar value="<?php echo $bar?>"/>