Hi,
I use:
$my_form_field=addslashes($my_form_field);
on the way into the db and
$my_output = stripslashes($my_output);
on the way out to the page
These will "escape" special chars for you like this on the way in
\"Here\'s my apostope\"
Hope that helps
Regards
Steve