ok thanks :)

on a sidenote: we also discovered when using UTF-8 charsets fully, we ran into a few small issues with icms, which will affect xoops aswell.

in certain conditions, it is not enough to just use htmlspecialchars. but you also need to set which characterset you are using aswell.

as default htmlspecialchars encodes with ISO charset, for utf-8 you need to specify utf-8

example $text = htmlspecialchars($text, ENT_QUOTES, _CHARSET);

especially with function htmlSpecialChars() in xoops textsanitizer