A little bit of an update here... this is kind interesting. Say I have a form like this:
<form method="post">
<input type="text" name="one" value="Keith & # 3 9 ;s House" />
<input type="text" name="two" value="" />
</form>
And I enter into box two the same string as the value in box one, Keith & # 3 9 ;s House, and I submit this form, when I recieve the data, form one will have Keith's House, while form two will have the correct, Dave $ # 3 9 ;s House
Any field with a value pre-set will have its ASCII equivalents convereted back to characters... not sure if this is a browser problem, or a PHP problem or...?
htmlspecialchars() is not an option at the moment, and it doesn't matter whether its POST or GET, both have the same behavoir...