The generally accepted CSV protocal is that if a field is to contain any commas, then that field must be quoted (using double-quote characters). Likewise, if a field contains any double-quote characters, then it must also be quoted and the quote characters that are part of the actual field content must be doubled up. In any case, a field may always be quoted even if it is not required. So if you wanted the following fields in one CSV line...
field1
this, is field2
"Here is field3," I said
...either of these lines would be valid...
field1,"this, is field2", """Here is field3,"" I said"
"field1","this, is field2", """Here is field3,"" I said"
If you are using PHP's [man]fgetcsv/man function to parse the file, it is already aware of these format requirements.