title: Efficiently sanitize user entered text
body: <p>I have a html form that accepts user entered text of size about 1000, and is submitted to a php page where it will be stored in mysql database. I use PDO with prepared statements to prevent sql injection. But to sanitize the text entered by user, what are the best efforts needed to do ?</p>
  
  <p>I want to prevent any script injection, xss attacks, etc.</p>