<?php 
$foo = htmlspecialchars($_GET['foo'], ENT_QUOTES);
$bar = htmlspecialchars($_GET['bar'], ENT_QUOTES);
?>
<input type=text name=foo value="<?php echo $foo?>"/>
<input type=text name=bar value="<?php echo $bar?>"/>