escape html-entities

[eluser]callumd[/eluser]
The one benefit of converting text in to HTML entities *prior* to going in to the database is that your app will run faster. (You encode the HTML entities only once this way, as opposed to having convert the data in to HTML entities each and every time you pull it from the database).

Whether this would be considered a really bad practice for other reasons, I'm not sure.