[pattycake]

fyi: here is the sql to find those guys:
SELECT * FROM `user` WHERE username LIKE '%&#%' (those are percents at the front and back)

here are some good sql's to fix the problem
UPDATE user SET username = REPLACE(username, '& #39;', '\'')
UPDATE user SET username = REPLACE(username, '& #33;', '!')
UPDATE user SET username = REPLACE(username, '& #036;', '$')
UPDATE user SET username = REPLACE(username, '& #124;', '|')

of course, change "user" to your user table name and.... remove the space between & and #