echoing encoded stuff has been already stated here, it is not a exploit or a bug, if you dumb enough to go and echo whatever someone tells you then bah. This has been debated much so im gonna shut it now, search the forums youll see.