1 files changed, 2 insertions, 4 deletions
diff --git a/boot.php b/boot.php
index 1a60ee173..56d85f638 100644
--- a/boot.php
+++ b/boot.php
@@ -205,12 +205,10 @@ function notags($string) {
 	return(str_replace(array("<",">","\xBA","\xBC","\xBE"), array('[',']','','',''), $string));
 }}
 
-// The PHP built-in tag escape function has traditionally been buggy
 if(! function_exists('escape_tags')) {
 function escape_tags($string) {
-	return(str_replace(
-		array('&', '"', "'", '<', '>'), 
-		array('&amp;', '&quot;', '&#39;', '&lt;', '&gt;'), $string));
+
+	return(htmlspecialchars($string));
 }}
 
 if(! function_exists('login')) {