<?php

//inseguro
$input = 'alert("ola")';
echo $input;

//seguro
$input_filter = filter_var($input, FILTER_SANITIZE_STRING);
echo "<br>". $input_filter;