prevent cross site scripting php code example

Example: prevent cross site scripting php

<div id="profile"><?php echo $user['profile']; ?></div>