htmlentities -> htmlspecialchars

web/modify_email.php

@@ -36,7 +36,7 @@ if ($err_cnt>0){
 	exit(0);
 	
 }
-$email=(htmlentities ($email,ENT_QUOTES,"UTF-8"));
+$email=(htmlspecialchars ($email,ENT_QUOTES,"UTF-8"));
 $sql="UPDATE `users` SET"
 ."`email`=?";
 $sql.="WHERE `user_id`=?";