for the second question , once i have the body field:
$body = "<!--DO NOT REMOVE##<table style=table-layout:fixed width=100% border=0> <tr> <td width=10%> </td> <td width=90%><font size=2>on ".date("F jS, Y h:ia")." ";
$body .= " wrote : </font></td></tr></table>##DO NOT REMOVE-->";
$body .= "<!--DO NOT REMOVE##<table style=table-layout:fixed width=100% border=0> <tr> <td width=10%> </td> <td width=90%><font size=2><b>##DO NOT REMOVE-->";
$body .= $_POST['body'];
$body .= " <!--DO NOT REMOVE## </b> </font></td></tr> <tr><td> </td> <td><img src=/zh_hk/images/forum/dot_565.gif width=560 height=1> </td></tr></table>##DO NOT REMOVE-->";
$query = "INSERT INTO game_forum (cat_id, user_id, title, body, rec_status,
rec_cr_date,last_upd_date,last_upd_by) VALUES (".$catID.", ".$user_id.",
'".$title."', '".$body."', '".REC_ONLINE."', now(), now(), ".$user_id.")";
and when the user edit....all this will be shown in the textarea...which is untidy
AND FOR THE FIRST PROBLEM.
Simple the person will type <a href="http://www.cnn.com>CNN</a> in the textarea....then the code will die