Update user.class.php

Stop html from being posted.