$addprodlist="INSERT INTO Products (ProdCat, SubCat, ID, ProdName, ProdPrice, ProdDesc, ProdImage, ProdDate, ProdMisc) VALUES ('$ProdCat', '$SubCat', '$ID', '$ProdName', '$ProdPrice', '$ProdDesc', '$ImgSrc', '$DateAdded', '$ProdMisc')";
when the form has an ' in it anywhere, the php code/mysql prouces a parse error. If you type in a \' then its fine.