[Brad]

Change:

PHP Code:

        $newpm['username'] = addslashes(unhtmlspecialchars($newpm['fromusername'], true));
        $newpm['title'] = addslashes(unhtmlspecialchars($newpm['title'], true)); 


To:

PHP Code:

        $newpm['username'] = unhtmlspecialchars($newpm['fromusername'], true);
        $newpm['title'] = unhtmlspecialchars($newpm['title'], true); 


That will fix the \' problems, looking at the avatars now