Profile & signs

[Boofo]

Is there any way to remove the & from the additional fields in the profile? I have added code to parse the smilies but I'm not sure how to parse the &.

[NTLDR]

& automatically becomes & on the users screen when viewing with there browser, if it was & in the (HTML) source then you will break XHTML validity.

However there should be a part in profile.php and admin/user.php that uses htmlspecialchars_uni() on the data thats entered which converts & to & " to " etc. Or you could fun the field/fields through unhtmlspecialchars() when displaying them.

[Boofo]

This works:

PHP Code:

require_once('./includes/functions_bbcodeparse.php');
$profilefield['value'] = parse_bbcode(unhtmlspecialchars($profilefield['value'])); 


I have this in the member.php right above:

PHP Code:

eval('$customfields .= "' . fetch_template('memberinfo_customfields') . '";'); 


It doesn't break the XHTML validity, does it?