It probably saves fine if you check the database. The issue is probably when displaying the value since we have automatic Cross Site Scripting protection enabled in the mysqli object.
You can disable it in the rsobj.php file, in the recordset, or in each ->getColumnVal() call.