I\'m trying to protect myself from sql injection and am using:
mysql_real_escape_string($string);
When posting HTML it looks something like
use the following function to remove slashes while showing on HTML page:
stripslashes();
eg. $html=stripslashes($html); OR $html=stripslashes($row["fieldname"]);