special chars in insert statement

[Anon]

INSERT INTO MTable(Name,ID) VALUES ('Mary's Diner','76538')

The above SQL String insrts two values into the MTable, but the first value is "Mary's Diner". SQL now sees this as another parameter (Because of the ' apostrophe). How may I overcome this problem
please help!

Thanks.

Jannes

[Anon]

use htmlspecialchars to encode the ' if you're not sure of the contents of the variable

if it's a constant put a \ in front of the '