Saving " and ' marks in MYSQL database

[include_me]

Hi, im trying to save a block of text into a BLOB field in a table but when the text contains either a " or a ' it stops saving the record and throws up a mysql_error.

ive tried putting \"$description\" and '$description' around the variables containing the information but this does not help, I have to go through the text removing the " and ' Marks..

Can anyone tell me why this is happening and how I can make it save properly in the correct format?

Thanks,
Chris

[rulian]

mysql_escape_string($string) i believe

[bradgrafelman]

User-supplied data should never be placed directly into a SQL query! Instead, sanitize it with a function such as [man]mysql_real_escape_string/man.

[Roger_Ramjet]

Better yet, move to PHP5 and start using PDO prepared statements