[sarciszewski]

Yikes. :)

OP, you might want to check out HTML Purifier (if you're using PHP) and htmlentities().