Index: bp-core.php
===================================================================
--- bp-core.php	(revision 1618)
+++ bp-core.php	(working copy)
@@ -847,6 +847,8 @@
 		wp_cache_set( 'bp_user_fullname_' . $user_id, $fullname, 'bp' );
 	}
 	
+	$fullname = sanitize_title( $fullname );
+	
 	return apply_filters( 'bp_core_get_user_displayname', stripslashes( strip_tags( trim( $fullname ) ) ) );
 }
 	/* DEPRECATED Use: bp_core_get_user_displayname */