how do hackers use the html editor to thier advantage and how can you stop them?