Any data coming from POST, GET, COOKIE etc. should use the addslashes(); and other checking. As this is coming from the user the data shouldnt be trusted.
When displaying the data again use stripslashes(); however i believe there is a MySQL Function that does this which will make the script slightly faster.