[Jordan]

Use the htmlentities() function on the string:

IE:

PHP Code:

$profile = htmlentities($profile); 


Before you insert it into the DB. You can read more about the function here: PHP: htmlentities - Manual