Hi > The database part of this is that I just retrieve $saved_message_title > from mySQL and thought it was already escaped and am not sure what went > wrong with the ECHO That doesn't make it a DB question. Not even close. This list is for matters *directly* concerning DB problems. replace: <?echo $saved_message_title;?> with: <?echo htmlentities($saved_message_title);?> Niel -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php