OP, you might want to check out HTML Purifier (if you're using PHP) and htmlentities().