Not surprising that the About box and every other field is being used to inject BBCode. Is there a way to prevent the use of BBcode in any of the profile fields, especially the about box? Spammers don't care about nofollow links. They will sell this junk to customers as a link and talk about benefits of ratios that Google uses, etc. doesn't matter if it's the truth. Right now I'm using mysql to filter the database but would prefer to prevent this stuff from the start. Perhaps I missed a setting.