I want to prevent cross site scripting in my website.....is dat good to use innerhtml,htmlencode? ...