DB_escape_string

[Forums]

I'm still not sure I fully understand the problem. Yes there are a few places in Phil's branch that don't deal with html entities correctly but they are not hard to fix up. I did it in my branch quite easily. All my tests use random mixes of so called illegal characters and html special characters and everything seems to work fine. I'm sure there are better ways of dealing with it (there is no such thing as a "perfect" solution) but the current code at least works. It always worries me when we are taking out working code (and DB_escape_string() has been in a very very long time, so cannot be causing that much damage) and not replacing it with something better.

Tim