#5 Parameter value not encoded

[S Vickers]

In users.asp the uid parameters on the Edit links are not encoded so, for example, User IDs containing ampersands are not properly passed (e.g. adduser.asp?uid=a&b should be adduser.asp?uid=a%26b).