mysqli_real_escape_string

Best Ways to Escape Quotes in PHP for MySQL