This is why HTML is dangerous, why the check_html routine is designed to do what it does, why we ALWAYS tell people to keep their versions up to date (6.2.1.1 catches this, and 6.3 does an even more careful job), and why we always tell people to keep HTML off.
If you are going to take a risk and turn HTML on, you will open yourself to things like this.
I have removed the offending code from your post and will now close this topic. Posting it was irresponsible.
Upgrade to 6.2.1.1. Now.
