Use the PHP function htmlentities() instead of
htmlspecialchars(). That way you cover most " ",
etc. Add it to the username, had instances of users
using < > and they werent being recognized, becuase it
didnt take em in to the database like that, had to add
htmlentities to them.
2003-02-08 22:30:09 UTC in phpBB
