Which PHP function can help prevent cross-site scripting code example

Example: prevent cross site scripting php

<div id="profile"><?php echo $user['profile']; ?></div>