Entering <?php echo in form screws website
<p>I was thinking I had totally secured the form on my glossary website, as I surrounded the $_GET on the target page with mysql_real_escape_string(strip_tags(...)). Still for some reason, if I enter <code>&lt;?php echo</code> in the textfield in the form, I get this:</p>

<pre><code>Forbidden

You don't have permission to access /... on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
</code></pre>

<p>Is this form still vulnerable for any attacks? (of any kind...)</p>
