??? Never include variables (especially those provided by the user) into a html string without escaping??? try including a double/single quote or one of the less/greater-than symbols in your name (depending on the context, that *will* cause all kinds of issues).