& automatically becomes & on the users screen when viewing with there browser, if it was & in the (HTML) source then you will break XHTML validity.
However there should be a part in profile.php and admin/user.php that uses htmlspecialchars_uni() on the data thats entered which converts & to & " to " etc. Or you could fun the field/fields through unhtmlspecialchars() when displaying them.
|