[legato]

Thanks! Should be fixed now.

[mp4box]

It seems not:

http://www.aggreddit.com/?r=%22%3C%2Fa%3E+%3Cscript%3Ealert%...

[sarciszewski]

Yikes. :)

OP, you might want to check out HTML Purifier (if you're using PHP) and htmlentities().