防止恶意代码注入XSS(cross site scripting)

Login.PHP页面
用户名
密  码
LoginController.PHP页面exec("set name utf8");//3.预处理$query$pdoStatement=$myPdo->prepare($query);//4.把接收到的用户和密码填入$pdoStatement->execute(array($username,$password));//5.取出结果$res=$pdoStatement->fetch();if(empty($res)){    echo "failed|try to login";}else{    header("Location:ManageUsers.php");}?>ManageUsers.PHP页面YOU SUCCEED!