diff --git a/example/tpl/welcome.phtml b/example/tpl/welcome.phtml
index 409b8a3..6901bbe 100644
--- a/example/tpl/welcome.phtml
+++ b/example/tpl/welcome.phtml
@@ -1,2 +1,2 @@
-<h1 class="text-center mt-5">Hello <?php echo $auth_user;?></h1>
+<h1 class="text-center mt-5">Hello <?php echo htmlspecialchars($auth_user);?></h1>
 <p class="text-center"><a href="./logout">Logout</a></p>
\ No newline at end of file