hi i have doubt which one to use among 1..validaterequest=true or server.htmlencode 2.. or both must be used i wanted to know which one is better and why ...