control_freak

How about using sessions?

try using htmlspecialchars($_POST['key'], ENT_QUOTES); this should encode all the double and single quotes to html characters. Alternately, you can use str_replace function if you want to remove single quotes all the way from your strings str_replace("'", '', $_POST['key']);