And be aware that if that resulting string is then used anywhere in HTML (like for a "href" attribute of an "a" element), it then also has to be processed through HTML::Entities too.

-- Randal L. Schwartz, Perl hacker
Be sure to read my standard disclaimer if this is a reply.

---

update: I discussed this before in Show a clickable link list of images from a CGI script.