PHP arrays whose fields HTML-encode themselves when echoed, with chainable methods for filtering, sorting, and grouping database rows. XSS-safe by default, with SmartString's encoder behind it: at least 2.5x faster than calling htmlspecialchars() yourself.
PHP strings that HTML-encode themselves on echo, interpolation, and concatenation. XSS-safe by default and at least 3x faster than calling htmlspecialchars() yourself.
PHP/MySQL database layer where values only enter SQL through placeholders and every result HTML-encodes itself on output. Within microseconds of raw mysqli + htmlspecialchars().