xss to php?

is this a sign of xss

[abushahin]

Hi, I store all th search terms that are being searched on my site recently ive had a user insert
"ftp://example.com.br:[e-mail].b"
as a search term. I allow only 40 characters so its been truncated i think the original is
"ftp://example.com.br:[e-mail]/reser.php"
anyone have any idea what this may be, it seems like someone is trying to steal all my data?

[edited by: eelixduppy at 7:25 pm (utc) on Mar 24, 2010]
[edit reason] exemplified [/edit]

[adams]

Depends on what the reser.php file is.

Always take the appropriate methods to protect yourself - escape strings, strip tags, etc.