Report xss/injection attacks by email (how to encode)

I have a form to signup yourself in a mailing list. I had set up the script to send me a mail for every signup and confirmation.